CVE-2018-12330

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware...

CVE-2018-12332

Incomplete Cleanup vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset...

CVE-2018-12332

ECOS Secure Boot Stick (SBS) 5.6.5 is affected by an “Incomplete Cleanup” vulnerability. The issue, described across CVE-2018-12332 records, allows an attacker with access to a compromised host PC to compromise authentication and encryption keys after a reset. Multiple connected sources corrobora...

CVE-2018-12331

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...

CVE-2018-12331

The CVE-2018-12331 entry concerns ECOS System Management Appliance (SMA) v5.2.68. Affected component: SMA authentication during Easy Enrollment. Root cause: authentication bypass via IP spoofing enabling a man-in-the-middle to access activation codes, passwords, and configurations. Documented imp...

CVE-2018-12330

CVE-2018-12330 concerns ECOS Secure Boot Stick (SBS) version 5.6.5, where a Protection Mechanism Failure reportedly allows an attacker to compromise authentication and encryption keys through compromised firmware. The connected records (CNVD-2019-09047, NVD entry) corroborate a vulnerability affe...

CVE-2018-12329

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows a local attacker to duplicate an authentication factor via cloning...

CVE-2018-12329

ECOS Secure Boot Stick (SBS) 5.6.5 is affected by a Protection Mechanism Failure that allows a local attacker to duplicate an authentication factor via cloning. The CVE entry (CVE-2018-12329) notes a vulnerability in SBS 5.6.5; connected sources corroborate an authentication bypass/security restr...

CVE-2018-12336: Exposure of Sensitive Information to an Unauthorized Actor

Undocumented Factory Backdoor in ECOS Secure Boot Stick aka SBS 5.6.5 allows the vendor to extract confidential information via remote root SSH access...

CVE-2018-12333: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to manipulate security relevant configurations and execute malicious code...

CVE-2018-12334: Undefined Security Weakness

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization attack...

CVE-2018-12335: Incorrect Permission Assignment for Critical Resource

Incorrect access control in ECOS System Management Appliance aka SMA 5.2.68 allows a user to compromise authentication keys, and access and manipulate security relevant configurations, via unrestricted database access during Easy Enrollment...

CVE-2018-12337: Exposure of Sensitive Information to an Unauthorized Actor

Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation...

CVE-2018-12338: Undefined Security Weakness

Undocumented Factory Backdoor in ECOS System Management Appliance aka SMA 5.2.68 allows the vendor to extract confidential information and manipulate security relevant configurations via remote root SSH access...

CVE-2018-12329: Exposure of Sensitive Information to an Unauthorized Actor

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows a local attacker to duplicate an authentication factor via cloning...

CVE-2018-12332: Incomplete Cleanup

Incomplete Cleanup vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset...

CVE-2018-12330: Undefined Security Weakness

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware...

CVE-2018-12331: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance aka SMA 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."...

PT-2018-11127

Name of the Vulnerable Software and Affected Versions ECOS System Management Appliance aka SMA version 5.2.68 Description The issue allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment." Recommendations For version 5.2.68...

PT-2018-11126

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue is related to a protection mechanism failure, allowing an attacker to compromise authentication and encryption keys by exploiting compromised firmware. Recommendations For ECOS...