CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8855

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-8855

Echelon » I.lon 100 » Version: N/A

cpe:2.3:h:echelon:i.lon_100:-
Echelon » I.lon 600 » Version: N/A

cpe:2.3:h:echelon:i.lon_600:-
Echelon » Smartserver 1 » Version: N/A

cpe:2.3:h:echelon:smartserver_1:-
Echelon » Smartserver 2 » Version: N/A

cpe:2.3:h:echelon:smartserver_2:-
Echelon » I.lon 100 Firmware » Version: N/A

cpe:2.3:o:echelon:i.lon_100_firmware:-
Echelon » I.lon 600 Firmware » Version: N/A

cpe:2.3:o:echelon:i.lon_600_firmware:-
Echelon » Smartserver 1 Firmware » Version: N/A

cpe:2.3:o:echelon:smartserver_1_firmware:-
Echelon » Smartserver 2 Firmware » Version: 4.06.048

cpe:2.3:o:echelon:smartserver_2_firmware:4.06.048
Echelon » Smartserver 2 Firmware » Version: 4.06.057

cpe:2.3:o:echelon:smartserver_2_firmware:4.06.057
Echelon » Smartserver 2 Firmware » Version: 4.07

cpe:2.3:o:echelon:smartserver_2_firmware:4.07
Echelon » Smartserver 2 Firmware » Version: 4.07.018

cpe:2.3:o:echelon:smartserver_2_firmware:4.07.018
Echelon » Smartserver 2 Firmware » Version: 4.08.012

cpe:2.3:o:echelon:smartserver_2_firmware:4.08.012
Echelon » Smartserver 2 Firmware » Version: 4.10.011

cpe:2.3:o:echelon:smartserver_2_firmware:4.10.011

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8855

Products

Pricing

Contact Us