Security Advisory

CVE-2021-27952

9.8
CRITICAL

Vulnerability Description

Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console.
Published Date August 3, 2021
Official Source NIST NVD Advisory