← Back

CVE-2018-12332

nvd nist
Published: Jun 17, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.2
Vector
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.5 / Impact: 3.6
Source: NVD

Description

Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset.

Affected (1)

Ecos
1 product
Secure Boot Stick Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Secure Boot Stick Firmware
Version 5.6.5
Running on/withPlatform Versions
Ecos
Secure Boot Stick
All versions

Related CWEs

CWE-459
Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (2)

Source: cve@mitre.org
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory

Timeline

No history available yet.