https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:13:07.108866+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-18592 cnvd-2018-18592 2026-10-07T23:13:07.112410+00:00 cnvd-2018-18592 https://cve.radiocsirt.org/vuln/euvd-2026-324151 EUVD-2026-324151 2026-10-07T23:13:07.112447+00:00 EUVD-2026-324151 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8851 fkie_cve-2018-8851 2026-10-07T23:13:07.112462+00:00

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.

 https://cve.radiocsirt.org/vuln/ghsa-37x4-rhq4-f92v GHSA-37x4-rhq4-f92v 2026-10-07T23:13:07.112501+00:00

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.

 https://cve.radiocsirt.org/vuln/gsd-2018-8851 gsd-2018-8851 2026-10-07T23:13:07.112518+00:00 gsd-2018-8851 https://cve.radiocsirt.org/vuln/icsa-18-200-03 ICSA-18-200-03 — Echelon SmartServer 1, SmartServer 2, SmartServer 3, i.LON 100, i.LON 600 (Update A) 2026-10-07T23:13:07.112530+00:00

An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This vulnerability does not affect the i.LON 600 product.CVE-2018-10627 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when specifying the directory to be accessed.CVE-2018-8859 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.CVE-2018-8851 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.CVE-2018-8855 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).