CVE-2022-22809

CVE-2022-22809 describes a CWE-306 Missing Authentication for Critical Function affecting Schneider Electric spaceLYnk, Wiser for KNX (formerly homeLYnk), and fellerLYnk, all with version 2.6.2 and prior. The issue allows unauthorized modification of touch configurations due to missing authentica...

CVE-2021-22739

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured...

CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...

CVE-2021-22732

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server...

CVE-2021-22736

The CVE-2021-22736 entry describes a Path Traversal vulnerability in Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to version 2.60, where improper restriction of a pathname to a restricted directory can allow an unauthorized file upload to trigger a denial of service. Affected comp...

CVE-2021-22733

CVE-2021-22733 affects Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to/including v2.60. Root cause: Improper Privilege Management enabling shell access when unauthorized code is loaded into the system folder. Impact (per sources): local access with high integrity and confidentiali...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2020-7525

CVE-2020-7525 affects spaceLYnk and Wiser for KNX (formerly homeLYnk). The root cause is improper restriction of excessive authentication attempts, enabling password guessing via brute force. Impact is authentication bypass risk on all hardware versions. Public documents do not specify a vendor-p...

PT-2020-3651 · Spacelynk · Spacelynk +1

Name of the Vulnerable Software and Affected Versions: spaceLYnk affected versions not specified Wiser for KNX formerly homeLYnk affected versions not specified Description: The issue is related to an improper restriction of excessive authentication attempts, which could allow an attacker to gues...

Schneider Electric Wiser for KNX and spaceLYnk Authorization Issues Vulnerability

Schneider Electric spaceLYnk and Wiser for KNX are both products of the French company Schneider Electric. spaceLYnk is a programmable logic controller. wiser for KNX is a home automation control system. An authorization issue vulnerability exists in Schneider Electric spaceLYnk prior to version...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

Authentication flaw

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

CVE-2019-6832

CVE-2019-6832 affects Schneider Electric spaceLYnk and Wiser for KNX (formerly homeLYnk) prior to version 2.4.0. The issue stems from errors in using standard permissions, enabling an attacker to bypass authentication and potentially take control of the affected system. Affected products: spaceLY...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

Schneider Electric Wiser for KNX, homeLYnk and spaceLYnk Unauthorized Access Vulnerability

Schneider Electric Wiser for KNX, homeLYnk and spaceLYnk are automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric Wiser for KNX version 2.1.0 and earlier, homeLYnk version 2.0.1 and earlier, and...

CVE-2018-7779

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access...

CVE-2018-7779

In Schneider Electric Wiser for KNX (V2.1.0 and prior), homeLYnk (V2.0.1 and prior), and spaceLYnk (V2.1.0 and prior), the vulnerability stems from weak and unprotected FTP access that could allow an attacker unauthorized access. The sources identify affected products and versions and describe th...