CVE-2018-12337

Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation...

CVE-2018-12334

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization attack...

PT-2018-11126

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue is related to a protection mechanism failure, allowing an attacker to compromise authentication and encryption keys by exploiting compromised firmware. Recommendations For ECOS...

PT-2018-11129

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue allows an attacker to manipulate security relevant configurations and execute malicious code due to insufficient verification of data authenticity. Recommendations For ECOS...

PT-2018-11124

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description A protection mechanism failure in the ECOS Secure Boot Stick allows a local attacker to duplicate an authentication factor via cloning. Recommendations For version 5.6.5, at the moment,...

PT-2018-11130

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue is related to a protection mechanism failure, allowing an attacker to compromise authentication and encryption keys through a virtualization attack. Recommendations For ECOS...

PT-2018-11128

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset. This is due to an Incomplete Cleanup vulnerability. Recommendations...

PT-2018-11133

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue is related to a Reliance on Security Through Obscurity vulnerability, which allows an attacker to partially extract confidential configurations. This can be achieved through...

PT-2018-11132

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick aka SBS version 5.6.5 Description The issue concerns an undocumented factory backdoor that allows the vendor to extract confidential information via remote root SSH access. Recommendations For ECOS Secure Boot Stick aka...

CVE-2018-12330: Undefined Security Weakness

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware...

CVE-2018-12332: Incomplete Cleanup

Incomplete Cleanup vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset...

CVE-2018-12329: Exposure of Sensitive Information to an Unauthorized Actor

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows a local attacker to duplicate an authentication factor via cloning...

CVE-2018-12333: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to manipulate security relevant configurations and execute malicious code...

CVE-2018-12334: Undefined Security Weakness

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization attack...

CVE-2018-12337: Exposure of Sensitive Information to an Unauthorized Actor

Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation...

CVE-2018-12336: Exposure of Sensitive Information to an Unauthorized Actor

Undocumented Factory Backdoor in ECOS Secure Boot Stick aka SBS 5.6.5 allows the vendor to extract confidential information via remote root SSH access...

Ecos Secure Boot Stick 5.6.5 Credential Disclosure / Information Leak

MULTIPLE SECURITY ISSUES IN ECOS SECURE BOOT STICK SBS - Software: Ecos Secure Boot Stick - Version: Stick Version 5.6.5, System Management Version 5.2.68 - Vendor Status: Vendor informed - Release Date: 13/06/2018 The latest version of this document may be downloaded from...

Lenovo Patches Arbitrary Code Execution Flaw

Lenovo issued a pair of security advisories on Friday for its popular ThinkPad line and System x servers. One bug is tied to an authentication flaw in the Secure Boot process; and the other to a vulnerability that would allow for arbitrary code execution. The company’s internal testing team...

CVE-2017-3775

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code...

Code injection

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code...