NVD disclosure day
CVE-2018-8859
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain Echelon devices, including SmartServer and i.LON products, have a flaw that allows unauthorized access by bypassing authentication controls. This occurs when attackers manipulate directory names. The risk involves unauthorized access to systems and potential data compromise.
CVE-2018-8855
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain Echelon devices allow unencrypted web connections and insecure firmware updates. This presents a risk of unauthorized access and potential manipulation of device operations, impacting organizational data confidentiality and operational integrity. Attackers could exploit these weaknesses to compromise industrial
CVE-2018-8851
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain Echelon devices store passwords in plain text, enabling an attacker with configuration file access to log into the web interface. This could lead to unauthorized system access, impacting operations and data. The realistic business risk involves potential compromise of industrial control systems and related oper
CVE-2018-10627
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Echelon SmartServer and i.LON devices are impacted, allowing attackers to retrieve and change sensitive configuration data like usernames and passwords. This presents a business risk of unauthorized system access and modification.