{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-23T09:58:25.711","vulnerabilities":[{"cve":{"id":"CVE-2021-41291","sourceIdentifier":"twcert@cert.org.tw","published":"2021-09-30T11:15:07.423","lastModified":"2026-06-17T04:08:14.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device."},{"lang":"es","value":"El controlador ECOA BAS sufre una vulnerabilidad de divulgación de contenido de salto de ruta. usando el parámetro GET en el Administrador de Archivos, unos atacantes no autenticados pueden divulgar remotamente el contenido del directorio en el dispositivo afectado"}],"affected":[{"source":"twcert@cert.org.tw","affectedData":[{"vendor":"ECOA","product":"ECS Router Controller ECS (FLASH)","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]},{"vendor":"ECOA","product":"RiskBuster Terminator E6L45","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]},{"vendor":"ECOA","product":"RiskBuster System RB 3.0.0","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]},{"vendor":"ECOA","product":"RiskBuster System TRANE 1.0","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]},{"vendor":"ECOA","product":"Graphic Control Software","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]},{"vendor":"ECOA","product":"SmartHome II E9246","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]},{"vendor":"ECOA","product":"RiskTerminator","versions":[{"version":"next of 0","lessThan":"unspecified","versionType":"custom","status":"unknown"}]}]}],"metrics":{"cvssMetricV31":[{"source":"twcert@cert.org.tw","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"twcert@cert.org.tw","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecoa:ecs_router_controller-ecs_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"E80292D1-E3AD-42B6-A63E-3546010B97A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecoa:ecs_router_controller-ecs:-:*:*:*:*:*:*:*","matchCriteriaId":"541B6C82-F00E-4BFC-9947-A55B2F4EDD06"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ecoa:riskbuster_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"19A28430-AB2B-423F-82D4-FC0E3A6DF335"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ecoa:riskbuster:-:*:*:*:*:*:*:*","matchCriteriaId":"58A6F2A4-A7DA-4A88-B572-917FFC80ADC1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecoa:riskterminator:-:*:*:*:*:*:*:*","matchCriteriaId":"841DF575-8E63-4AB4-A6F9-77C28FC65BCE"}]}]}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-5127-3cbd3-1.html","source":"twcert@cert.org.tw","tags":["Third Party Advisory"]},{"url":"https://www.twcert.org.tw/tw/cp-132-5127-3cbd3-1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}