Lucene search

CVE-2022-3089 EnOcean SmartServer Hard-coded credentials

🗓️ 13 Feb 2023 16:57:28Reported by icscertType

Echelon SmartServer storing hard-coded credentials in cleartext file with potential for unauthorized access

Reporter	Title	Published	Views	Family All 5
Prion	Design/Logic Flaw	13 Feb 202317:15	–	prion
CVE	CVE-2022-3089	13 Feb 202317:15	–	cve
NVD	CVE-2022-3089	13 Feb 202317:15	–	nvd
ICS	EnOcean SmartServer	7 Feb 202300:00	–	ics
Vulnrichment	CVE-2022-3089 EnOcean SmartServer Hard-coded credentials	13 Feb 202316:28	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "Smartserver",
    "vendor": "EnOcean",
    "versions": [
      {
        "status": "affected",
        "version": " v2.2 SR8/SP8 (4.12.006) with i.LON Vision v2.2 SR8/SP8 (4.12.006)"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-037-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 16:28Current

9.5High risk

Vulners AI Score9.5

CVSS36.3

EPSS0.00253

CWE-798