Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

ECOA vulnerabilities

13 published CVEs name ECOA among the affected products.

All 13 in the listAtom feed of new CVEs
Published CVEs
13
Last 12 months
0
Critical
7
Known exploited
0

Critical 7High 6Medium 0Low 0Not scored 0

Newest CVEs

  • CVE-2021-41302

    ECOA BAS controller - Missing Encryption of Sensitive Data

    ECOA · ECS Router Controller ECS (FLASH)

    High7.3
  • CVE-2021-41301

    ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor

    ECOA · ECS Router Controller ECS (FLASH)

    Critical9.8
  • CVE-2021-41300

    ECOA BAS controller - Insufficiently Protected Credentials-2

    ECOA · ECS Router Controller ECS (FLASH)

    Critical9.8
  • CVE-2021-41299

    ECOA BAS controller - Use of Hard-coded Credentials

    ECOA · ECS Router Controller ECS (FLASH)

    Critical9.8
  • CVE-2021-41298

    ECOA BAS controller - Improper Access Control

    ECOA · ECS Router Controller ECS (FLASH)

    High8.8
  • CVE-2021-41297

    ECOA BAS controller - Insufficiently Protected Credentials-1

    ECOA · ECS Router Controller ECS (FLASH)

    High8.8
  • CVE-2021-41296

    ECOA BAS controller - Weak Password Requirements

    ECOA · ECS Router Controller ECS (FLASH)

    Critical9.8
  • CVE-2021-41295

    ECOA BAS controller - Cross-Site Request Forgery (CSRF)

    ECOA · ECS Router Controller ECS (FLASH)

    High8.8
  • CVE-2021-41294

    ECOA BAS controller - Path Traversal-4

    ECOA · ECS Router Controller ECS (FLASH)

    Critical9.1
  • CVE-2021-41293

    ECOA BAS controller - Path Traversal-3

    ECOA · ECS Router Controller ECS (FLASH)

    High7.5

Products with the most CVEs

  1. ECS Router Controller ECS (FLASH)13
  2. Graphic Control Software13
  3. RiskBuster System RB 3.0.013
  4. RiskBuster System TRANE 1.013
  5. RiskBuster Terminator E6L4513
  6. RiskTerminator13
  7. SmartHome II E924613

Most common weaknesses

  1. CWE-22 Path traversal4
  2. CWE-522 2
  3. CWE-639 Authorization bypass through a user-controlled key (IDOR)2
  4. CWE-200 Exposure of sensitive information1
  5. CWE-284 Improper access control1
  6. CWE-287 Improper authentication1
  7. CWE-288 1
  8. CWE-311 1
  9. CWE-312 Cleartext storage of sensitive information1
  10. CWE-352 Cross-site request forgery (CSRF)1