EnOcean SmartServer Flaws Expose Buildings to Remote Hacking
EnOcean SmartServer vulnerabilities enable remote code execution on building management systems.
Claroty researchers discovered two critical vulnerabilities in EnOcean SmartServer, a multi-protocol IoT gateway used in building automation, factories, and data centers. The flaws—CVE-2026-22885 (security bypass) and CVE-2026-20761 (remote code execution)—allow remote attackers to bypass memory protections and execute arbitrary commands with root privileges. EnOcean released patch version 4.60.023 to address the issues, which also affect legacy i.LON devices.
AI summary of the linked source. Not reviewed by an editor. How this works
Run EnOcean?
Get an email when a new story names EnOcean, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-22885
- cve — CVE-2026-20761