CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2020-7525

CVE-2020-7525 affects spaceLYnk and Wiser for KNX (formerly homeLYnk). The root cause is improper restriction of excessive authentication attempts, enabling password guessing via brute force. Impact is authentication bypass risk on all hardware versions. Public documents do not specify a vendor-p...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2019-19643

ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...

CVE-2019-19643

ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...

Denial of service

ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...

CVE-2019-19643

CVE-2019-19643 affects ise smart connect KNX Vaillant (version 1.2.839). The vulnerability is a Denial of Service. NVD data lists CVSSv3.1 base score 7.5 (NETWORK, LOW attack complexity, PR:N, UI:N, A:H) and CVSSv2 base score 5.0 (NETWORK, LOW, A:P). Exploitation status is not provided in the sou...

CVE-2019-19643

ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...

Multiple Schneider Electric Products Server-Side Request Forgery Vulnerabilities

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A server-side request forgery vulnerability exists in several Schneider Electric products. An...

Cross-site scripting vulnerability in multiple Schneider Electric products (CNVD-2019-34798)

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A cross-site scripting vulnerability exists in several Schneider Electric products. An attacker...

Access Control Error Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34801)

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. An access control error vulnerability exists in several Schneider Electric products. A...

Schneider Electric Wiser for KNX and spaceLYnk Authorization Issues Vulnerability

Schneider Electric spaceLYnk and Wiser for KNX are both products of the French company Schneider Electric. spaceLYnk is a programmable logic controller. wiser for KNX is a home automation control system. An authorization issue vulnerability exists in Schneider Electric spaceLYnk prior to version...

CVE-2019-6835

A Cross-Site Scripting XSS CWE-79 vulnerability exists in U.motion Server MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15, which could allow an attacker to inject...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

CVE-2019-6838

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15, which could allow a user with low privilege...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

Authentication flaw

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

CVE-2019-6832

CVE-2019-6832 affects Schneider Electric spaceLYnk and Wiser for KNX (formerly homeLYnk) prior to version 2.4.0. The issue stems from errors in using standard permissions, enabling an attacker to bypass authentication and potentially take control of the affected system. Affected products: spaceLY...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

PT-2019-18372 · Unknown · U.Motion Server

Name of the Vulnerable Software and Affected Versions: U.motion Server MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15 Description: A Server-Side Request Forgery SSRF...