Advisories · Technology
ECOA RiskBuster System RB 3.0.0.
Every CVE that names ECOA RiskBuster System RB 3.0.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
ECOA BAS controller - Missing Encryption of Sensitive Data
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Weak cryptography or TLS
- CVSS 9.8 CriticalCritical · CVSS 9+
ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
ECOA BAS controller - Insufficiently Protected Credentials-2
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
ECOA BAS controller - Use of Hard-coded Credentials
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
- CVSS 8.8 High
ECOA BAS controller - Improper Access Control
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Broken access control
- CVSS 8.8 High
ECOA BAS controller - Insufficiently Protected Credentials-1
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
ECOA BAS controller - Weak Password Requirements
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
- CVSS 8.8 High
ECOA BAS controller - Cross-Site Request Forgery (CSRF)
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Cross-site request forgery (CSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
ECOA BAS controller - Path Traversal-4
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Path traversal
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
ECOA BAS controller - Path Traversal-3
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
ECOA BAS controller - Broken Authentication
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Authentication bypass
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
ECOA BAS controller - Path Traversal-1
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
ECOA BAS controller - Path Traversal-1
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Unrestricted file upload