CVE-2018-8859

🗓️ 24 Jul 2018 17:00:00Reported by icscertType

Echelon SmartServer 1 & 2, i.LON 100 - Auth Bypas

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2018-8859	24 Jul 201817:29	–	attackerkb
CNVD	Echelon SmartServer 1, SmartServer 2 and i.LON 100 Authentication Bypass Vulnerability	20 Jul 201800:00	–	cnvd
Cvelist	CVE-2018-8859	24 Jul 201817:00	–	cvelist
EUVD	EUVD-2018-20467	7 Oct 202500:30	–	euvd
ICS	Echelon SmartServer 1, SmartServer 2, SmartServer 3, i.LON 100, i.LON 600 (Update A)	19 Jul 201800:00	–	ics
NVD	CVE-2018-8859	24 Jul 201817:29	–	nvd
Prion	Design/Logic Flaw	24 Jul 201817:29	–	prion
ThreatPost	Black Hat 2018: Widespread Critical Flaws Found in Smart-City Gear	9 Aug 201817:38	–	threatpost
Vulnrichment	CVE-2018-8859	24 Jul 201817:00	–	vulnrichment

NVD

Vulners

Node

echelon smartserver_1_firmwareMatch-

AND

echelon smartserver_1Match-

Node

echelon smartserver_2_firmwareRange<4.11.007

AND

echelon smartserver_2Match-

Node

echelon i.lon_100_firmwareMatch-

AND

echelon i.lon_100Match-

Node

echelon i.lon_600_firmwareMatch-

AND

echelon i.lon_600Match-

[
  {
    "product": "SmartServer 1",
    "vendor": "Echelon",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "SmartServer 2",
    "vendor": "Echelon",
    "versions": [
      {
        "status": "affected",
        "version": "all versions prior to release 4.11.007"
      }
    ]
  },
  {
    "product": "i.LON 100",
    "vendor": "Echelon",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "i.LON 600",
    "vendor": "Echelon",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-200-03

02 Jun 2026 20:16Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 39.8

CVSS 3.19.8

EPSS0.00311

SSVC