CVE-2018-12338

Published: Jun 17, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and manipulate security relevant configurations via remote root SSH access.

Affected (1)

Products: Ecos: System Management Appliance

Ecos

1 product

System Management Appliance

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ecos System Management Appliance	Version 5.2.68

References (2)

https://telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html

Source: cve@mitre.org

MitigationThird Party Advisory

https://telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party Advisory

Timeline

No history available yet.