https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:51:05.736118+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-41290 CVE-2021-41290 — ECOA BAS controller - Path Traversal-1 2026-10-06T07:51:05.737181+00:00

Affected: ECOA ECS Router Controller ECS (FLASH), ECOA RiskBuster Terminator E6L45, ECOA RiskBuster System RB 3.0.0, ECOA RiskBuster System TRANE 1.0, ECOA Graphic Control Software, ECOA SmartHome II E9246, ECOA RiskTerminator

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device.