CVE-2018-12338: Ecos System Management Appliance

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and manipulate security relevant configurations via remote root SSH access.

Affected products

• Ecos System Management Appliance: version 5.2.68 only

Published 2018-06-17. Last modified 2026-06-17.