Vulnerabilities (CVE)

Filtered by vendor Ecos Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12331 1 Ecos 1 System Management Appliance 2020-08-24 5.8 MEDIUM 7.4 HIGH
Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."
CVE-2018-12330 1 Ecos 2 Secure Boot Stick, Secure Boot Stick Firmware 2019-10-03 8.5 HIGH 8.1 HIGH
Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware.
CVE-2018-12333 1 Ecos 2 Secure Boot Stick, Secure Boot Stick Firmware 2019-10-03 6.8 MEDIUM 8.1 HIGH
Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate security relevant configurations and execute malicious code.
CVE-2018-12334 1 Ecos 2 Secure Boot Stick, Secure Boot Stick Firmware 2019-10-03 6.5 MEDIUM 7.5 HIGH
Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization attack.
CVE-2018-12335 1 Ecos 1 System Management Appliance 2019-10-03 4.1 MEDIUM 7.3 HIGH
Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys, and access and manipulate security relevant configurations, via unrestricted database access during Easy Enrollment.