CVE-2021-41290

CRITICAL · CVSS 9.8 EPSS 2.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-09-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-41290

Severity

CRITICAL

CVSS

9.8

EPSS

2.32%

Original NVD Description

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device.