CVE-2022-22812

🗓️ 09 Feb 2022 22:05:09Reported by schneiderType

CVE-2022-22812 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spaceLYnk, Wiser for KNX, fellerLYn

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2022-22812	9 Feb 202223:15	–	attackerkb
CNNVD	spaceLYnk 跨站脚本漏洞	9 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-22812	9 Feb 202222:05	–	cvelist
EUVD	EUVD-2022-27955	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22812	9 Feb 202223:15	–	nvd
Prion	Cross site scripting	9 Feb 202223:15	–	prion
RedhatCVE	CVE-2022-22812	23 May 202500:44	–	redhatcve

NVD

Node

schneider-electric spacelynk_firmwareRange≤2.6.2

AND

schneider-electric spacelynkMatch-

Node

schneider-electric wiser_for_knx_firmwareRange≤2.6.2

AND

schneider-electric wiser_for_knxMatch-

Node

schneider-electric fellerlynk_firmwareRange≤2.6.2

AND

schneider-electric fellerlynkMatch-

[
  {
    "product": "spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 06:47Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.16.1

EPSS0.00317

CWE-79