CVE-2021-41293

HIGH · CVSS 7.5 EPSS 20.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-09-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-41293

Severity

HIGH

CVSS

7.5

EPSS

20.62%

Original NVD Description

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and system information.