CVE-2018-12336 Hardcoded credentials in n/a

What is CVE-2018-12336?

CVE-2018-12336 is a critical vulnerability in n/a, published on 17 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access.

Weakness: CWE-200

Which versions are affected by CVE-2018-12336?

It affects 1 product.

Products include Ecos Secure Boot Stick Firmware.

How do I fix CVE-2018-12336?

No fix has been published for CVE-2018-12336 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-12336 being exploited?

There is no known exploitation of CVE-2018-12336 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-12330 Security feature bypass in n/a High 8.1
• CVE-2018-12333 Security feature bypass in n/a High 8.1
• CVE-2018-12334 Security feature bypass in n/a High 7.5
• CVE-2018-12329 Security feature bypass in n/a Medium 5.9
• CVE-2018-12337 Information disclosure in n/a Medium 4.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4539-59fr-99v5.