Description
ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ECOA | ECS Router Controller ECS (FLASH) | — | — |
| ECOA | RiskBuster Terminator E6L45 | — | — |
| ECOA | RiskBuster System RB 3.0.0 | — | — |
| ECOA | RiskBuster System TRANE 1.0 | — | — |
| ECOA | Graphic Control Software | — | — |
| ECOA | SmartHome II E9246 | — | — |
| ECOA | RiskTerminator | — | — |