VULNERABILITY INTELLIGENCE

CVE-2018-12338

CVSS score9.8 CRITICAL
EPSS probability1.51%
CISA KEVNot currently listed
Published2018-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and manipulate security relevant configurations via remote root SSH access.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references