PT-2018-11132 · Ecos · Ecos Secure Boot Stick

Franz Girlich + 2 · Publicado 2018-06-17 · Atualizado 2018-08-10 · CVE-2018-12336

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ECOS Secure Boot Stick (aka SBS) version 5.6.5

Description The issue concerns an undocumented factory backdoor that allows the vendor to extract confidential information via remote root SSH access.

Recommendations For ECOS Secure Boot Stick (aka SBS) version 5.6.5, consider disabling remote SSH access until a patch is available to prevent potential exploitation of the backdoor.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-12336

Produtos afetados

Ecos Secure Boot Stick

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-12336 · Aviso do Fabricante
• https://telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12336 · Nota de Segurança