4.2
CVE-2018-12332
- EPSS 0.03%
- Veröffentlicht 17.06.2018 16:29:00
- Zuletzt bearbeitet 21.11.2024 03:45:00
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ecos ≫ Secure Boot Stick Firmware Version5.6.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.062 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.2 | 0.5 | 3.6 |
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 1.9 | 3.4 | 2.9 |
AV:L/AC:M/Au:N/C:P/I:N/A:N
|
CWE-459 Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.