EIP-2026-101680

This exploit demonstrates an information disclosure vulnerability in ECOA Building Automation System by downloading sensitive configuration files (syspara.dat and images.dat) via unauthenticated HTTP GET requests, revealing plain-text passwords and system details.