title: ECOA BAS controller - Broken Authentication
description: ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can remotely bypass authentication and disclose sensitive information and circumvent physical access controls in smart homes and buildings and manipulate HVAC.
problem types: CWE-288 Authentication Bypass Using an Alternate Path or Channel
affected:
{
product: ECS Router Controller ECS (FLASH)
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskBuster Terminator E6L45
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskBuster System RB 3.0.0
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskBuster System TRANE 1.0
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: Graphic Control Software
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: SmartHome II E9246
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
{
product: RiskTerminator
vendor: ECOA
versions:
lessThan: unspecified, status: unknown, version: next of 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Contact tech support from ECOA.