{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-20T13:41:43.701","vulnerabilities":[{"cve":{"id":"CVE-2018-10627","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2018-07-24T17:29:00.260","lastModified":"2026-06-17T01:34:18.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This vulnerability does not affect the i.LON 600 product."},{"lang":"es","value":"Echelon SmartServer 1 en todas las versiones, SmartServer 2 en todas las versiones anteriores a 4.11.007, i.LON 100 en todas las versiones y i.LON 600 en todas las versiones. Un atacante puede emplear la API SOAP para recuperar y cambiar elementos de configuración sensibles como los nombres de usuario y las contraseñas para los servidores web y FTP. Esta vulnerabilidad no afecta al producto i.LON 600."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"Echelon","product":"SmartServer 1","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Echelon","product":"SmartServer 2","versions":[{"version":"all versions prior to release 4.11.007","status":"affected"}]},{"vendor":"Echelon","product":"i.LON 100","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"Echelon","product":"i.LON 600","versions":[{"version":"all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-02T19:30:32.559398Z","id":"CVE-2018-10627","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:echelon:smartserver_1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"096B893D-BCDF-4788-81F4-301FE9E074F3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:echelon:smartserver_1:-:*:*:*:*:*:*:*","matchCriteriaId":"9D78AEC2-D6E0-42EE-AEF4-5AEBA6B29611"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:echelon:smartserver_2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.11.007","matchCriteriaId":"83547993-8A11-4A60-9CBE-3CD006272A1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:echelon:smartserver_2:-:*:*:*:*:*:*:*","matchCriteriaId":"418DEBAC-57D5-4BA8-806B-3DC235F1B625"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:echelon:i.lon_100_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"124BE3F4-8E5F-46F7-9545-6D4E31B5A275"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:echelon:i.lon_100:-:*:*:*:*:*:*:*","matchCriteriaId":"D195E8CF-A5E2-4799-A0EF-189A825BB3AF"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}}]}