CVE-2021-22737

2021-05-2600:00:00

CWE-307

schneider

www.cve.org

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior",
    "versions": [
      {
        "version": "homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior",
        "status": "affected"
      }
    ]
  }
]

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04