Description (CNA)
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Echelon / SmartServer 1 | affected all versions |
| Echelon / SmartServer 2 | affected all versions prior to release 4.11.007 |
| Echelon / i.LON 100 | affected all versions |
| Echelon / i.LON 600 | affected all versions |
CWE
CWE-319
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.