Design/Logic Flaw

2023-02-1317:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

cleartext credentials

echelon smartserver 2.2

i.lon vision 2.2

file storage

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could allow an attacker to obtain cleartext usernames and passwords of the SmartServer. If the attacker obtains the file, then the credentials could be used to control the web user interface and file transfer protocol (FTP) server.

CPENameOperatorVersion
i.lon_visioneq2.2

CPE	Name	Operator	Version
	i.lon_vision	eq	2.2

References

www.cisa.gov/uscert/ics/advisories/icsa-23-037-01