Intrusion PreventionECOA.Building.Automation.System.Cookie.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in ECOA BAS Controller.
This vulnerability is due to an error in the vulnerable application when handling a maliciously crafted HTTP request. An unauthenticated remote attacker may be able to exploit this to bypass security controls on the device.
Affected Products
ECOA ECS Router Controller - ECS (FLASH)
ECOA RiskBuster Terminator - E6L45
ECOA RiskBuster System - RB 3.0.0
ECOA RiskBuster System - TRANE 1.0
ECOA Graphic Control Software
ECOA SmartHome II - E9246
ECOA RiskTerminator
Impact
Security Bypass: Remote attackers can bypass security checks of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://www.ecoa.com.tw
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52812 |
| Created | Apr 05, 2023 |
| Updated | May 15, 2023 |
| Risk |
|
| CVE ID | CVE-2021-41292 |
| Exploit Prediction Score | 0.16% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |