CVE-2021-27952

Name of the Vulnerable Software and Affected Versions: ecobee3 lite version 4.5.81.200

Description: The issue concerns hardcoded default root credentials on the device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console.

Recommendations: For version 4.5.81.200, consider changing the default root credentials to prevent unauthorized access. As a temporary workaround, restrict physical access to the serial console to minimize the risk of exploitation.