CVE-2018-8859 - CVE House
Back to Database
Status published Unknown CVE-2018-8859

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior...

Vulnerability Description

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when specifying the directory to be accessed. This vulnerability does not affect the i.LON 600 product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8859

Credits & Attribution

No credits recorded in the NVD database.

References

More from Echelon

View All →
CVE-2018-8855
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior...
Unknown 0
CVE-2018-8851
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior...
Unknown 0
CVE-2018-10627
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior...
Unknown 0

Affected Vendor

Affected Software

SmartServer 1, SmartServer 2, i.LON 100, i.LON 600
Vulnerable Versions:
all versions, all versions prior to release 4.11.007

Timeline

Official Publish: July 24th, 2018
Last Modified: June 2nd, 2026
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-288

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1098 Account Manipulation
Privilege Escalation