Lucene search

[email protected]CVE-2018-12338

HistoryJun 17, 2018 - 4:29 p.m.

CVE-2018-12338

2018-06-1716:29:00

[email protected]

web.nvd.nist.gov

cve-2018-12338

undocumented factory backdoor

ecos system management appliance

sma 5.2.68

remote root ssh access

security relevant configurations

confidential information

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and manipulate security relevant configurations via remote root SSH access.

Affected configurations

NVD

Node

ecossystem_management_applianceMatch5.2.68

CPENameOperatorVersion
ecos:system_management_applianceecos system management applianceeq5.2.68

CPE	Name	Operator	Version
ecos:system_management_appliance	ecos system management appliance	eq	5.2.68

References

telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

Related for CVE-2018-12338

prion1 cvelist1 nvd1