EUVD-2018-20459

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Echelon SmartServer devices may expose passwords in plaintext, risking unauthorized access to interfaces.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2018-8851	24 Jul 201817:29	–	attackerkb
CNVD	Multiple Echelon Products Information Disclosure Vulnerability	20 Jul 201800:00	–	cnvd
CVE	CVE-2018-8851	24 Jul 201817:00	–	cve
Cvelist	CVE-2018-8851	24 Jul 201817:00	–	cvelist
ICS	Echelon SmartServer 1, SmartServer 2, SmartServer 3, i.LON 100, i.LON 600 (Update A)	19 Jul 201800:00	–	ics
NVD	CVE-2018-8851	24 Jul 201817:29	–	nvd
Prion	Design/Logic Flaw	24 Jul 201817:29	–	prion
Vulnrichment	CVE-2018-8851	24 Jul 201817:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "c2ebc2cf-121f-3625-85fe-600c7977f17d",
        "vendor": {
          "name": "Echelon"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0c0aaf40-14be-328d-ac36-c5aa5f824d5b",
        "product": {
          "name": "SmartServer 2"
        },
        "product_version": "all versions prior to release 4.11.007"
      },
      {
        "id": "53afb1bd-3f4f-3c61-ab7a-09e48c4f3eda",
        "product": {
          "name": "i.LON 100"
        },
        "product_version": "all versions"
      },
      {
        "id": "87ed60d7-643d-331d-bc41-c8320ebdf6a0",
        "product": {
          "name": "SmartServer 1"
        },
        "product_version": "all versions"
      },
      {
        "id": "a24dc8a1-c677-392c-84ac-43fdbceffa6c",
        "product": {
          "name": "i.LON 600"
        },
        "product_version": "all versions"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-200-03
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.5High risk

Vulners AI Score9.5

CVSS 39.8

CVSS 25

EPSS0.00223