Known Vulnerabilities for products from Ecos

Listed below are 11 of the newest known vulnerabilities associated with the vendor "Ecos".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2018-12338 Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential ... 9.8 - CRITICAL 2018-06-17 2019-10-03
CVE-2018-12337 Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partiall... 4.6 - MEDIUM 2018-06-17 2018-08-10
CVE-2018-12336 Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information... 9.8 - CRITICAL 2018-06-17 2018-08-10
CVE-2018-12335 Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys... 7.3 - HIGH 2018-06-17 2019-10-03
CVE-2018-12334 Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and en... 7.5 - HIGH 2018-06-17 2019-10-03
CVE-2018-12333 Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to ... 8.1 - HIGH 2018-06-17 2019-10-03
CVE-2018-12332 Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication an... 4.2 - MEDIUM 2018-06-17 2019-10-03
CVE-2018-12331 Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-midd... 7.4 - HIGH 2018-06-17 2020-08-24
CVE-2018-12330 Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and en... 8.1 - HIGH 2018-06-17 2019-10-03
CVE-2018-12329 Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication... 5.9 - MEDIUM 2018-06-17 2018-08-09
CVE-2017-1000020 SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. "eCos Embed... 9.8 - CRITICAL 2017-07-17 2017-08-15

Known software with vulnerabilities from Ecos

Type Vendor Product Version
ApplicationEcosEmbperl1.3.4
ApplicationEcosSecure Boot Stick5.6.5
ApplicationEcosSystem Management Appliance5.2.68