ECOA records

13 published records for vendor ecoa.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
55Plan	CVE-2021-41291Proof of concept	ECOA BAS controller - Path Traversal-1ecoa · ecs router controller-ecs firmware · CWE-22 Pre-auth Path traversal	High7.5	—	82.7%	Sep 30, 2021
40Plan	CVE-2021-41290No exploit	ECOA BAS controller - Path Traversal-1ecoa · ecs router controller-ecs firmware · CWE-434 pre-auth RCE Path traversal File upload	Critical9.8	—	2.3%	Sep 30, 2021
40Plan	CVE-2021-41299No exploit	ECOA BAS controller - Use of Hard-coded Credentialsecoa · ecs router controller-ecs firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	2.1%	Sep 30, 2021
40Plan	CVE-2021-41301No exploit	ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actorecoa · ecs router controller-ecs firmware · CWE-200 Pre-auth Auth bypass Info leak	Critical9.8	—	2.0%	Sep 30, 2021
39Monitor	CVE-2021-41300No exploit	ECOA BAS controller - Insufficiently Protected Credentials-2ecoa · ecs router controller-ecs firmware · CWE-522 Pre-auth Info leak	Critical9.8	—	1.0%	Sep 30, 2021
39Monitor	CVE-2021-41296No exploit	ECOA BAS controller - Weak Password Requirementsecoa · ecs router controller-ecs firmware · CWE-521 Pre-auth	Critical9.8	—	1.0%	Sep 30, 2021
36Monitor	CVE-2021-41293Proof of concept	ECOA BAS controller - Path Traversal-3ecoa · ecs router controller-ecs firmware · CWE-22 Pre-auth Path traversal	High7.5	—	19.9%	Sep 30, 2021
36Monitor	CVE-2021-41294No exploit	ECOA BAS controller - Path Traversal-4ecoa · ecs router controller-ecs firmware · CWE-22 Pre-auth Path traversal	Critical9.1	—	1.2%	Sep 30, 2021
36Monitor	CVE-2021-41292No exploit	ECOA BAS controller - Broken Authenticationecoa · ecs router controller-ecs firmware · CWE-288 Pre-auth Auth bypass	Critical9.1	—	1.2%	Sep 30, 2021
35Monitor	CVE-2021-41298No exploit	ECOA BAS controller - Improper Access Controlecoa · ecs router controller-ecs firmware · CWE-284 Broken access control (IDOR)	High8.8	—	0.9%	Sep 30, 2021
35Monitor	CVE-2021-41297No exploit	ECOA BAS controller - Insufficiently Protected Credentials-1ecoa · ecs router controller-ecs firmware · CWE-522 Info leak	High8.8	—	0.7%	Sep 30, 2021
35Monitor	CVE-2021-41295No exploit	ECOA BAS controller - Cross-Site Request Forgery (CSRF)ecoa · ecs router controller-ecs firmware · CWE-352 Pre-auth CSRF	High8.8	—	0.4%	Sep 30, 2021
29Monitor	CVE-2021-41302No exploit	ECOA BAS controller - Missing Encryption of Sensitive Dataecoa · ecs router controller-ecs firmware · CWE-311 Pre-auth	High7.3	—	0.4%	Sep 30, 2021

CVE-2021-41291
55Plan
ECOA BAS controller - Path Traversal-1
HighCVSS 7.5Proof of conceptEPSS 83%
- Pre-auth
- Path traversal
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41290
40Plan
ECOA BAS controller - Path Traversal-1
CriticalCVSS 9.8No exploitEPSS 2%
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41299
40Plan
ECOA BAS controller - Use of Hard-coded Credentials
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41301
40Plan
ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor
CriticalCVSS 9.8No exploitEPSS 2%
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41300
39Monitor
ECOA BAS controller - Insufficiently Protected Credentials-2
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Info leak
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41296
39Monitor
ECOA BAS controller - Weak Password Requirements
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41293
36Monitor
ECOA BAS controller - Path Traversal-3
HighCVSS 7.5Proof of conceptEPSS 20%
- Pre-auth
- Path traversal
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41294
36Monitor
ECOA BAS controller - Path Traversal-4
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Path traversal
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41292
36Monitor
ECOA BAS controller - Broken Authentication
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Auth bypass
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41298
35Monitor
ECOA BAS controller - Improper Access Control
HighCVSS 8.8No exploitEPSS 1%
- Broken access control (IDOR)
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41297
35Monitor
ECOA BAS controller - Insufficiently Protected Credentials-1
HighCVSS 8.8No exploitEPSS 1%
- Info leak
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41295
35Monitor
ECOA BAS controller - Cross-Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
ecoa · ecs router controller-ecs firmwareSep 30, 2021
CVE-2021-41302
29Monitor
ECOA BAS controller - Missing Encryption of Sensitive Data
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
ecoa · ecs router controller-ecs firmwareSep 30, 2021