cvedb.io
CVE-2018-8855
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-07-24T17:29:00.400 · Last modified 2026-06-17T02:05:31.240

Summary

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

Affected products

echelon — smartserver_1_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when echelon ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.