Ecos System Management Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Ecos System Management Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-12338 — CVSS 9.8 (critical): Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information…
• CVE-2018-12331 — CVSS 7.4 (high): Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to…
• CVE-2018-12335 — CVSS 7.3 (high): Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys, and access…