Security feature bypass

2018-06-1716:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

JSON

Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation.

CPENameOperatorVersion
secure_boot_stick_firmwareeq5.6.5

CPE	Name	Operator	Version
	secure_boot_stick_firmware	eq	5.6.5

References

telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html