3.7 LowCWE-125
CVE-2026-22885
EnOcean SmartServer IoT Out-of-bounds Read
EnOcean Edge IncSmartServer IoT
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 37% of scored CVEs
SeverityCVSS
3.7Low
Description NVD
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in a memory leak from the program's memory.
Coverage 1 article · 1 outlet
- Remote flaws in EnOcean SmartServer expose buildings to hackingSecurityWeek · first in our coverage