Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2018-8855

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web conn

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Echelon SmartServer 1

  • all versionsaffected

Echelon SmartServer 2

  • all versions prior to release 4.11.007affected

Echelon i.LON 100

  • all versionsaffected

Echelon i.LON 600

  • all versionsaffected

References