ECOA BAS controller - Cross-Site Request Forgery (CSRF)
ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ECS Router Controller ECS (FLASH)
Vendor
ECOA
Product
ECS Router Controller ECS (FLASH)
Platforms
Unknown
Default status
Unknown
ECS Router Controller ECS (FLASH) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
next of 0
unknown
custom
unspecified
Unavailable
None listed
RiskBuster Terminator E6L45
Vendor
ECOA
Product
RiskBuster Terminator E6L45
Platforms
Unknown
Default status
Unknown
RiskBuster Terminator E6L45 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
next of 0
unknown
custom
unspecified
Unavailable
None listed
RiskBuster System RB 3.0.0
Vendor
ECOA
Product
RiskBuster System RB 3.0.0
Platforms
Unknown
Default status
Unknown
RiskBuster System RB 3.0.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
next of 0
unknown
custom
unspecified
Unavailable
None listed
RiskBuster System TRANE 1.0
Vendor
ECOA
Product
RiskBuster System TRANE 1.0
Platforms
Unknown
Default status
Unknown
RiskBuster System TRANE 1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
next of 0
unknown
custom
unspecified
Unavailable
None listed
Graphic Control Software
Vendor
ECOA
Product
Graphic Control Software
Platforms
Unknown
Default status
Unknown
Graphic Control Software · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
next of 0
unknown
custom
unspecified
Unavailable
None listed
SmartHome II E9246
Vendor
ECOA
Product
SmartHome II E9246
Platforms
Unknown
Default status
Unknown
SmartHome II E9246 · Scoped product and version facts