Secure Boot Stick Firmware

secure_boot_stick_firmware

Vendor: Ecos • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-12337 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation.
CVE-2018-12336 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access.
CVE-2018-12334 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 7.5 HIGH· v3 6.5 MEDIUM· v2 Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization attack.
CVE-2018-12333 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate security relevant configurations and execute malicious code.
CVE-2018-12332 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 4.2 MEDIUM· v3 1.9 LOW· v2 Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset.
CVE-2018-12330 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 8.1 HIGH· v3 8.5 HIGH· v2 Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware.
CVE-2018-12329 1Ecos 1Secure Boot Stick Firmware Nov 21, 2024 Jun 17, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via cloning.