Ecos Secure Boot Stick Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ecos Secure Boot Stick Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2018-12336 — CVSS 9.8 (critical): Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote…
• CVE-2018-12330 — CVSS 8.1 (high): Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys…
• CVE-2018-12333 — CVSS 8.1 (high): Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate…
• CVE-2018-12334 — CVSS 7.5 (high): Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys…
• CVE-2018-12329 — CVSS 5.9 (medium): Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via…
• CVE-2018-12337 — CVSS 4.6 (medium): Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract…
• CVE-2018-12332 — CVSS 4.2 (medium): Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption…