CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

Hardcoded credentials

DISPUTED KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store...

CVE-2021-43575

CVE-2021-43575 affects KNX ETS6 up to version 6.0.0, where a hard-coded password (ETS5Password) and a salt (Ivan Medvedev) enable local users to read project information. This mirrors CVE-2021-36799 for ETS5, and Red Hat entries confirm the vulnerability details and vendor dispute over cryptograp...

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Hardcoded credentials

UNSUPPORTED WHEN ASSIGNED KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-36799

CVE-2021-36799 : KNX ETS5 through 5.7.6 uses a hard-coded password (ETS5Password) with a salt value (Ivan Medvedev), enabling local users to read project information. This vulnerability is limited to products no longer supported by the maintainer. No public remediation or patch details are provid...

PT-2021-21366 · Knx Ets · Knx Ets

Name of the Vulnerable Software and Affected Versions: KNX ETS versions 5 through 5.7.6 Description: The issue allows local users to read project information due to the use of a hard-coded password ETS5Password with a salt value of Ivan Medvedev. This problem is specific to products that are no...

KNX ETS5 Professional 信任管理问题漏洞

KNX ETS5 Professional is an application software from KNX Corp. a manufacturer-independent configuration software tool for designing and configuring smart home and building controls using the KNX system. A trust management issue vulnerability exists in KNX ETS5 Professional that stems from the...

CVE-2021-22739

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured...

CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...

CVE-2021-22732

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server...

CVE-2021-22736

The CVE-2021-22736 entry describes a Path Traversal vulnerability in Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to version 2.60, where improper restriction of a pathname to a restricted directory can allow an unauthorized file upload to trigger a denial of service. Affected comp...

CVE-2021-22733

CVE-2021-22733 affects Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to/including v2.60. Root cause: Improper Privilege Management enabling shell access when unauthorized code is loaded into the system folder. Impact (per sources): local access with high integrity and confidentiali...

Loxone Miniserver Detection Consolidation

Consolidation of Loxone Miniserver device detections. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if descripti...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...