CVE-2018-12331

Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP spoofing during "Easy Enrollment."

Score

CVSS 3.0 7.4 High

Status

Modified - cve@mitre.org

Published

2018-06-17

Last modified

2024-08-05

Weaknesses

CWE-290

Affected products

• System Management Appliance (Ecos)

References

• https://telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html