EUVD-2017-14266

Malware in sbrugna...

EUVD-2017-16665

Malware in sbrugna...

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers, which stems from errors in the use of standard permissions, allows attackers to bypass authentication procedures.

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures remotely...

The vulnerability of Schneider Electric’s homeLYnk controller’s microprogramming software, related to insufficient data cleaning at the management level, allows attackers to execute commands with root privileges.

The vulnerability of Schneider Electric’s homeLYnk controller microprogramming software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute commands with root privileges using specially crafted POST requests...

Schneider Electric homeLYnk Controller Security Bypass Vulnerability

The Schneider Electric homeLYnk Controller is a logic controller. A security bypass vulnerability exists in all versions of the Schneider Electric homeLYnk Controller prior to 1.5.0. A remote attacker could exploit this vulnerability to obtain sensitive information...

Command injection

A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0...

CVE-2017-7689

A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0...

CVE-2017-7689

A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0...

CVE-2017-7689

Schneider Electric homeLYnk Controller (all versions prior to 1.5.0) is affected by CVE-2017-7689 (Command Injection). The issue arises from network features that can be manipulated via specially crafted POST requests, and exploits require user interaction to trigger. CVSSv3 base score 9.8 (CRITI...

CVE-2017-7689

A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0...

CVE-2017-5157

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code...

CVE-2017-5157

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code...

Cross site scripting

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code...

CVE-2017-5157

CVE-2017-5157 affects Schneider Electric homeLYnk Controller (LSS100100) prior to v1.5.0. It is a cross-site scripting vulnerability where attacker-supplied input can execute JavaScript in a user’s browser. ICS-CERT advisory ICSA-17-019-01A notes CVSS v3.0 base score 6.3 and provides mitigations ...

CVE-2017-5157

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code...

Schneider Electric homeLYnk Controller

CVSS V3 6.3 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Schneider Electric Equipment: homeLYnk Controller, LSS100100 Vulnerability: Cross-site Scripting AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following products: homeLYnk Controller,...

Schneider Electric homeLYnk Controller (Update A)

CVSS V3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Schneider Electric Equipment: homeLYnk Controller, LSS100100 Vulnerability: Cross-site Scripting, Command Injection UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-019-01...