Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Echelon Clear all filters
TI-2022-02850 CVE-2022-3089 · GHSA-r7ch-cwp4-rh7c

EnOcean SmartServer Hard-coded credentials

Priority MEDIUM 42

Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could allow an attacker to obtain cleartext usernames and passwords of the SmartServer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0025 Published 2023-02-13 No fix listed CWE-798
TI-2018-07515 CVE-2018-10627 · GHSA-gcxm-q2x4-v5qm

Information disclosure in Echelon SmartServer 1

Priority MEDIUM 51

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01225 Published 2018-07-24 No fix listed CWE-200
TI-2018-06401 CVE-2018-8859 · GHSA-fvc7-qrrw-9pwh

Authentication bypass in Echelon SmartServer 1

Priority MEDIUM 52

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01579 Published 2018-07-24 No fix listed CWE-288
TI-2018-06393 CVE-2018-8851 · GHSA-37x4-rhq4-f92v

Insufficiently protected credentials in Echelon SmartServer 1

Priority MEDIUM 51

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01297 Published 2018-07-24 No fix listed CWE-256