Lucene search

CVE-2022-3089

🗓️ 13 Feb 2023 17:10:15Reported by icscertType

Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials, allowing attacker to obtain and misuse credentials

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2022-3089 EnOcean SmartServer Hard-coded credentials	13 Feb 202316:28	–	cvelist
ICS	EnOcean SmartServer	7 Feb 202300:00	–	ics
NVD	CVE-2022-3089	13 Feb 202317:15	–	nvd
Prion	Design/Logic Flaw	13 Feb 202317:15	–	prion
Vulnrichment	CVE-2022-3089 EnOcean SmartServer Hard-coded credentials	13 Feb 202316:28	–	vulnrichment

Nvd

Node

echelon i.lon_visionMatch2.2

AND

echelon smartserverMatch2.2

[
  {
    "defaultStatus": "unaffected",
    "product": "Smartserver",
    "vendor": "EnOcean",
    "versions": [
      {
        "status": "affected",
        "version": " v2.2 SR8/SP8 (4.12.006) with i.LON Vision v2.2 SR8/SP8 (4.12.006)"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-037-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 17:15Current

7.8High risk

Vulners AI Score7.8

CVSS36.3 - 9.8

EPSS0.0002

SSVC