CVE-2018-12337

Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation.

Score

CVSS 3.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2018-06-17

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Secure Boot Stick Firmware (Ecos)

References

• https://telematik.prakinf.tu-ilmenau.de/ecos-sbs/advisory.html