CVE-2018-12336

Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-06-17

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Secure Boot Stick Firmware (Ecos)

References

• https://telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html