Advisories · Technology

ECOA RiskBuster Terminator E6L45.

Every CVE that names ECOA RiskBuster Terminator E6L45 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-41302 CVE record

CVSS 7.3 High

ECOA BAS controller - Missing Encryption of Sensitive Data
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Weak cryptography or TLS
Not analysed yet 30 Sept 2021
CVE-2021-41301 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Information disclosure
Not analysed yet 30 Sept 2021
CVE-2021-41300 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

ECOA BAS controller - Insufficiently Protected Credentials-2
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
Not analysed yet 30 Sept 2021
CVE-2021-41299 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

ECOA BAS controller - Use of Hard-coded Credentials
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
Not analysed yet 30 Sept 2021
CVE-2021-41298 CVE record

CVSS 8.8 High

ECOA BAS controller - Improper Access Control
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Broken access control
Not analysed yet 30 Sept 2021
CVE-2021-41297 CVE record

CVSS 8.8 High

ECOA BAS controller - Insufficiently Protected Credentials-1
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
Not analysed yet 30 Sept 2021
CVE-2021-41296 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

ECOA BAS controller - Weak Password Requirements
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Hard-coded credentials
Not analysed yet 30 Sept 2021
CVE-2021-41295 CVE record

CVSS 8.8 High

ECOA BAS controller - Cross-Site Request Forgery (CSRF)
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Cross-site request forgery (CSRF)
Not analysed yet 30 Sept 2021
CVE-2021-41294 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

ECOA BAS controller - Path Traversal-4
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Path traversal
Not analysed yet 30 Sept 2021
CVE-2021-41293 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

ECOA BAS controller - Path Traversal-3
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Path traversal
Not analysed yet 30 Sept 2021
CVE-2021-41292 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

ECOA BAS controller - Broken Authentication
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Authentication bypass
Not analysed yet 30 Sept 2021
CVE-2021-41291 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

ECOA BAS controller - Path Traversal-1
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Path traversal
Not analysed yet 30 Sept 2021
CVE-2021-41290 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

ECOA BAS controller - Path Traversal-1
- ECOA ECS Router Controller ECS (FLASH)
- ECOA RiskBuster Terminator E6L45
- Unrestricted file upload
Not analysed yet 30 Sept 2021