Ecos Secure Boot Stick Firmware
7 CVEs affecting Ecos Secure Boot Stick Firmware. Latest disclosed: 2018-06-17. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12336 | Critical | 9.8 | 2018-06-17 | Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access. |
CVE-2018-12333 | High | 8.1 | 2018-06-17 | Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate security relevant confi… |
CVE-2018-12330 | High | 8.1 | 2018-06-17 | Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firm… |
CVE-2018-12334 | High | 7.5 | 2018-06-17 | Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization… |
CVE-2018-12329 | Medium | 5.9 | 2018-06-17 | Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via cloning. |
CVE-2018-12337 | Medium | 4.6 | 2018-06-17 | Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confidential configurati… |
CVE-2018-12332 | Medium | 4.2 | 2018-06-17 | Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromise… |