Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2018-8851

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plainte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Echelon SmartServer 1

  • all versionsaffected

Echelon SmartServer 2

  • all versions prior to release 4.11.007affected

Echelon i.LON 100

  • all versionsaffected

Echelon i.LON 600

  • all versionsaffected

References