Description
ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ECOA ECS Router Controller ECS (FLASH)
next of 0 to < unspecifiedunknown
ECOA RiskBuster Terminator E6L45
next of 0 to < unspecifiedunknown
ECOA RiskBuster System RB 3.0.0
next of 0 to < unspecifiedunknown
ECOA RiskBuster System TRANE 1.0
next of 0 to < unspecifiedunknown
ECOA Graphic Control Software
next of 0 to < unspecifiedunknown
ECOA SmartHome II E9246
next of 0 to < unspecifiedunknown
ECOA RiskTerminator
next of 0 to < unspecifiedunknown