HarborGuard / CVE
Back to search
HIGHCVE-2026-20761Published Modified CNA icscert

CVE-2026-20761: EnOcean SmartServer IoT Command Injection

A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in arbitrary OS command execution on the device.

Metrics

CVSS v3.1
8.1
Severity
HIGH
Fixed in
4.60.023
Affected Products
1

Fix available

4.60.023
Affected packages
  • EnOcean Edge Inc / SmartServer IoT
    ≤ 4.60.009
    Fixed in 4.60.023
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References