CVE-2021-41297CWE-522

ECOA BAS controller - Insufficiently Protected Credentials-1

High · published September 30, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00742 · 54.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2021-09-30T10:41Z
EPSS history
Timeline
  • 30 SEP 10:41Z
    ECOA BAS controller - Insufficiently Protected Credentials-1
    cvelistv5