⚠️ EnOcean has addressed two vulnerabilities disclosed by #Team82 vulnerability researcher Amir Zaltzman in its SmartServer IoT product, and #IoT edge server that is ideal for monitoring energy management and other building management systems.

[claroty@infosec.exchange]

️ EnOcean has addressed two vulnerabilities disclosed by #Team82 vulnerability researcher Amir Zaltzman in its SmartServer IoT product, and #IoT edge server that is ideal for monitoring energy management and other building management systems. The vulnerabilities enable remote attackers to crafted Lon IP-852 messages that result in code execution on the device. https://claroty.com/team82/disclosure-dashboard

You can read more about Team82's research into the LonTalk protocol here: https://claroty.com/team82/research/examining-the-legacy-bms-lontalk-protocol