PT-2018-11133

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue is related to a Reliance on Security Through Obscurity vulnerability, which allows an attacker to partially extract confidential configurations. This can be achieved through...

PT-2018-11126

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue is related to a protection mechanism failure, allowing an attacker to compromise authentication and encryption keys by exploiting compromised firmware. Recommendations For ECOS...

PT-2018-11124

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description A protection mechanism failure in the ECOS Secure Boot Stick allows a local attacker to duplicate an authentication factor via cloning. Recommendations For version 5.6.5, at the moment,...

PT-2018-11132

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue concerns an undocumented factory backdoor that allows the vendor to extract confidential information via remote root SSH access. Recommendations For ECOS Secure Boot Stick aka...

PT-2018-11129

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue allows an attacker to manipulate security relevant configurations and execute malicious code due to insufficient verification of data authenticity. Recommendations For ECOS...

CVE-2018-12330: Undefined Security Weakness

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware...

Ecos Secure Boot Stick 5.6.5 Credential Disclosure / Information Leak

MULTIPLE SECURITY ISSUES IN ECOS SECURE BOOT STICK SBS - Software: Ecos Secure Boot Stick - Version: Stick Version 5.6.5, System Management Version 5.2.68 - Vendor Status: Vendor informed - Release Date: 13/06/2018 The latest version of this document may be downloaded from...