CVE-2018-12336: Ecos Secure Boot Stick Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access.

Affected products

  • Ecos Secure Boot Stick Firmware: version 5.6.5 only

Published 2018-06-17. Last modified 2026-06-17.