CVE-2018-8855

Summary

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

Affected Software

Weaknesses

• CWE-319: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319

ADP Enrichment

CVE Program Container

Additional References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03

• ←Previous
• Next→