Read the docs

Echelon

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Echelon records in CISA KEV

No Echelon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 52

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01579 Published 2018-07-24 No fix listed CWE-288
Priority MEDIUM 51

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01225 Published 2018-07-24 No fix listed CWE-200
Priority MEDIUM 51

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01297 Published 2018-07-24 No fix listed CWE-256
TI-2022-02850 CVE-2022-3089 · GHSA-r7ch-cwp4-rh7c

EnOcean SmartServer Hard-coded credentials

Priority MEDIUM 42

Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could allow an attacker to obtain cleartext usernames and passwords of the SmartServer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0025 Published 2023-02-13 No fix listed CWE-798
Open these records in search →