I.lon 100 Firmware Security Vulnerabilities and Issues — I.lon 100 Firmware CVE List

Lucene search

EchelonI.lon 100 Firmware

4 matches found

CVE•added 2018/07/24 5:29 p.m.•47 views

CVE-2018-10627

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This v...

9.8CVSS9.2AI score0.00266EPSS

CVE•added 2018/07/24 5:29 p.m.•39 views

CVE-2018-8855

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

9.8CVSS9.3AI score0.00156EPSS

CVE•added 2018/07/24 5:29 p.m.•32 views

CVE-2018-8851

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.

9.8CVSS9.2AI score0.00235EPSS

CVE•added 2018/07/24 5:29 p.m.•32 views

CVE-2018-8859

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when spec...

9.8CVSS9.4AI score0.00328EPSS