CVE:CVE-2021-41290
CNNVD:CNNVD-202109-1963
Ecoa Technologies Corp Ecoa Bas controller是中国Ecoa Technologies Corp公司的一个楼宇自动化控制器。
Ecoa Bas controller存在路径遍历漏洞，未经身份验证的攻击者可以远程设置位置和内容类型的任意值，并获得在受影响设备上执行任意代码的可能性。
solution:Upgrade ecoa ecs_router_controller-ecs_firmware to a higher version than -; Upgrade ecoa riskbuster_firmware to a higher version than -; Upgrade ecoa riskterminator to a higher version than -