A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in arbitrary OS…
CVSS 3.1HIGH 8.1·Network·No auth·No interaction·EPSS 0.01026·Published 2026-02-20·Fixed in 4.60.023CWE-77
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in a memory lea…
CVSS 3.1LOW 3.7·Network·No auth·No interaction·EPSS 0.0043·Published 2026-02-20·Fixed in 4.60.023CWE-125