title: ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor
description: ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information and help her in authentication bypass, privilege escalation and full system access.
problem types: CWE-200 Information Exposure
affected:
{
product: ECS Router Controller ECS (FLASH)
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskBuster Terminator E6L45
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskBuster System RB 3.0.0
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskBuster System TRANE 1.0
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: Graphic Control Software
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: SmartHome II E9246
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskTerminator
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Contact tech support from ECOA.