CVE:CVE-2021-41297
CNNVD:CNNVD-202109-1970
Ecoa Technologies Corp Ecoa Bas controller是中国Ecoa Technologies Corp公司的一个楼宇自动化控制器。
Ecoa Bas controller存在安全漏洞，该漏洞允许经过身份验证的用户通过以纯文本形式披露管理帐户的凭据来远程提升权限。
solution:Upgrade ecoa ecs_router_controller-ecs_firmware to a higher version than -; Upgrade ecoa riskbuster_firmware to a higher version than -; Upgrade ecoa riskterminator to a higher version than -