Ecos · Ecos System Management Appliance · CVE-2018-12335
**Name of the Vulnerable Software and Affected Versions**
ECOS System Management Appliance (aka SMA) version 5.2.68
**Description**
The issue concerns incorrect access control, allowing a user to compromise authentication keys and manipulate security configurations through unrestricted database access during Easy Enrollment.
**Recommendations**
For version 5.2.68, consider restricting database access during Easy Enrollment to prevent unauthorized manipulation of security configurations and authentication keys. As a temporary workaround, limit access to the database to minimize the risk of exploitation.