ECOA RiskBuster System TRANE 1.0

• CVE-2021-41302 High 7.3 ECOA BAS controller - Missing Encryption of Sensitive Data 0.4%
• CVE-2021-41301 Critical 9.8 ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor 2.0%
• CVE-2021-41300 Critical 9.8 ECOA BAS controller - Insufficiently Protected Credentials-2 1.0%
• CVE-2021-41299 Critical 9.8 ECOA BAS controller - Use of Hard-coded Credentials 2.1%
• CVE-2021-41298 High 8.8 ECOA BAS controller - Improper Access Control 0.9%
• CVE-2021-41297 High 8.8 ECOA BAS controller - Insufficiently Protected Credentials-1 0.7%
• CVE-2021-41296 Critical 9.8 ECOA BAS controller - Weak Password Requirements 0.9%
• CVE-2021-41295 High 8.8 ECOA BAS controller - Cross-Site Request Forgery (CSRF) 0.4%
• CVE-2021-41294 Critical 9.1 ECOA BAS controller - Path Traversal-4 1.2%
• CVE-2021-41293 High 7.5 ECOA BAS controller - Path Traversal-3 19.9%
• CVE-2021-41292 Critical 9.8 ECOA BAS controller - Broken Authentication 1.2%
• CVE-2021-41291 High 7.5 ECOA BAS controller - Path Traversal-1 82.7%
• CVE-2021-41290 Critical 9.8 ECOA BAS controller - Path Traversal-1 2.3%