description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.
problem types: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
affected:
{
product: SmartServer 1
vendor: Echelon
versions:
status: affected, version: all versions
}
{
product: SmartServer 2
vendor: Echelon
versions:
status: affected, version: all versions prior to release 4.11.007
}
{
product: i.LON 100
vendor: Echelon
versions:
status: affected, version: all versions
}
{
product: i.LON 600
vendor: Echelon
versions:
status: affected, version: all versions
}
