CVE-2026-22885 — EnOcean SmartServer IoT Out-of-bounds Read
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially craf…
Published: 2026-02-20 · CVSS: 3.7 · CVSS 3.1
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in a memory leak from the program's memory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7