142 matches found
Information disclosure
Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured...
CVE-2021-22740
Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded...
CVE-2021-22740
CVE-2021-22740 concerns Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk prior to or at 2.60, where an information disclosure occurs when an unauthorized file is uploaded. The availing connected documents confirm the affected products and the root cause (information exposure via unauthor...
CVE-2021-22740
Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded...
CVE-2021-22739
Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured...
CVE-2021-22739
The vulnerability (CVE-2021-22739) affects Schneider Electric homeLYnk and spaceLYnk, versions up to 2.60, with an Information Exposure flaw that could compromise a device during initial configuration. The Red Hat and CNVD entries corroborate an information-disclosure issue for these products. Th...
CVE-2021-22738
CVE-2021-22738 affects Schneider Electric homeLYnk and spaceLYnk (versions up to and including 2.60). The root cause is use of a broken or risky cryptographic algorithm that could allow unauthorized access after credentials are discovered via brute force. The Red Hat, CNVD, CVE/NVD entries corrob...
CVE-2021-22738
Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...
CVE-2021-22736
The CVE-2021-22736 entry describes a Path Traversal vulnerability in Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to version 2.60, where improper restriction of a pathname to a restricted directory can allow an unauthorized file upload to trigger a denial of service. Affected comp...
CVE-2021-22735
The CVE concerns Schneider Electric homeLYnk and spaceLYnk (Wiser For KNX/SpaceLYnk) up to version 2.60. Root cause: improper verification of cryptographic signatures, which could permit remote code execution if unauthorized code is copied to the device. The connected sources confirm the affected...
CVE-2021-22734
Schneider Electric homeLYnk and spaceLYnk (≤ version 2.60) are affected by an Improper Verification of Cryptographic Signature vulnerability that could allow remote code execution when unauthorized code is loaded. The Connected documents do not provide exploit details, in‑the‑wild status, or a co...
CVE-2021-22734
Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code...
CVE-2021-22733
Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...
CVE-2021-22732
CVE-2021-22732 affects Schneider Electric homeLYnk and spaceLYnk (Wiser For KNX) systems. The vulnerability is described as improper privilege management in homeLYnk/spaceLYnk versions up to V2.60 and earlier, enabling code execution if an attacker loads unauthorized code on the web server. Conne...
Schneider Electric homeLYnk和spaceLYnk 路径遍历漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A path traversal vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. The vulnerabilities could be exploited by remote attackers to...
Schneider Electric homeLYnk和spaceLYnk 安全漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker can exploit the vulnerability to execute arbitrary code in...
Schneider Electric spaceLYnk和homeLYnk 信息泄露漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. Schneider Electric homeLYnk and spaceLYnk are vulnerable to an information disclosure vulnerability that could result in the program being corrupted...
CVE-2021-22737
The CVE-2021-22737 issue affects Schneider Electric’s homeLYnk (Wiser For KNX) and spaceLYnk, specifically versions prior to V2.60. The root cause is Insufficiently Protected Credentials, which could allow unauthorized access once credentials are discovered after a brute-force attack. Public docu...
Schneider Electric homeLYnk和spaceLYnk 数据伪造问题漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk that stems from the presence of incorrect password signature verificatio...
Schneider Electric spaceLYnk和homeLYnk 数据伪造问题漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker can exploit the vulnerability to execute arbitrary code in...