CVE-2018-8855

CVE-2018-8855

Vendor Echelon
Product SmartServer 1
Weakness CWE-319 · Cleartext transmission
Published July 24, 2018
Last update June 2, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

Key dates

02Disclosure timeline

July 24, 2018 CVE published
June 2, 2026 Record updated