🔎 New from Team82: Our researchers uncovered two vulnerabilities in EnOcean’s SmartServer IoT platform and i.LON devices that connect building management systems to the internet.

[claroty@infosec.exchange]

New from Team82: Our researchers uncovered two vulnerabilities in EnOcean’s SmartServer IoT platform and i.LON devices that connect building management systems to the internet.

An attacker exploiting these vulnerabilities can bypass memory protections on the device, leak memory, and execute arbitrary OS commands.

Read here https://claroty.com/team82/research/exploiting-enocean-smartserver-to-attack-connected-building-management-systems