cvedb.io
CVE-2021-41296
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2021-09-30T11:15:07.707 · Last modified 2026-06-17T04:08:15.617

Summary

ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.

Affected products

ecoa — ecs_router_controller-ecs_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when ecoa ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.