Ecos

11 CVEs across 4 Ecos products. Browse Ecos vulnerabilities, severities, and proof-of-concept exploits.

Ecos products with known CVEs

ProductCVEs
Secure Boot Stick7
Secure Boot Stick Firmware7
System Management Appliance3
Embedded Web Servers1
Ecos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-12338Critical9.82018-06-17Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and manipulate securit…
CVE-2018-12337Medium4.62018-06-17Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confidential configurati…
CVE-2018-12336Critical9.82018-06-17Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access.
CVE-2018-12335High7.32018-06-17Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys, and access and manipulate securi…
CVE-2018-12334High7.52018-06-17Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization…
CVE-2018-12333High8.12018-06-17Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate security relevant confi…
CVE-2018-12332Medium4.22018-06-17Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromise…
CVE-2018-12331High7.42018-06-17Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to compromise authenti…
CVE-2018-12330High8.12018-06-17Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firm…
CVE-2018-12329Medium5.92018-06-17Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via cloning.
CVE-2017-1000020Critical9.82017-07-17SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. "eCos Embedded Web Servers used by Multiple R…