Lucene search
+L

142 matches found

CNNVD
CNNVD
added 2022/02/09 12:00 a.m.10 views

Schneider Electric 多款产品安全漏洞

Schneider Electric spaceLYnk and others are products of Schneider Electric, a French company. spaceLYnk is a programmable logic controller. homeLYnk is a home automation specialist. fellerLYnk is a logic controller. Schneider Electric A security vulnerability exists in several Schneider Electric...

9.8CVSS8.3AI score0.01091EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/02/09 12:00 a.m.40 views

CVE-2022-22809

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX formerly...

5.5AI score0.00778EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/09 12:00 a.m.105 views

CVE-2022-22809

CVE-2022-22809 describes a CWE-306 Missing Authentication for Critical Function affecting Schneider Electric spaceLYnk, Wiser for KNX (formerly homeLYnk), and fellerLYnk, all with version 2.6.2 and prior. The issue allows unauthorized modification of touch configurations due to missing authentica...

5.3CVSS5.2AI score0.00778EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/02/09 12:00 a.m.8 views

Schneider Electric spaceLYnk 访问控制错误漏洞

The Schneider Electric spaceLYnk is a programmable logic controller from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric spaceLYnk that originates when an attacker can exploit the vulnerability to attempt to modify the touch configuration, which...

5.3CVSS5.8AI score0.00778EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/02/09 12:00 a.m.9 views

spaceLYnk 跨站脚本漏洞

The Schneider Electric spaceLYnk is a programmable logic controller from Schneider Electric France. The spaceLYnk suffers from a cross-site scripting vulnerability that originated when an attacker could use the vulnerability to inject and execute arbitrary malicious JavaScript code in the target...

6.1CVSS6.4AI score0.00604EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/02/09 12:00 a.m.18 views

PT-2022-6546 · Unknown +1 · Wiser For Knx +2

Name of the Vulnerable Software and Affected Versions: spaceLYnk versions 2.6.2 and prior Wiser for KNX formerly homeLYnk versions 2.6.2 and prior fellerLYnk versions 2.6.2 and prior Description: A Missing Authentication for Critical Function issue exists, allowing unauthorized modifications to...

9.4CVSS5.3AI score0.00778EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/02/08 12:00 a.m.8 views

PT-2022-6504 · Unknown +1 · Wiser For Knx +2

Name of the Vulnerable Software and Affected Versions: spaceLYnk versions 2.6.2 and prior Wiser for KNX formerly homeLYnk versions 2.6.2 and prior fellerLYnk versions 2.6.2 and prior Description: A Cross-Site Request Forgery CSRF issue exists that could induce users to perform unintended actions,...

10CVSS8.1AI score0.00406EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/07/30 12:00 a.m.9 views

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers, which stems from errors in the use of standard permissions, allows attackers to bypass authentication procedures.

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures remotely...

9CVSS7.4AI score0.01461EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
added 2021/06/02 12:00 a.m.10 views

Schneider Electric homeLYnk and spaceLYnk Information Disclosure Vulnerability (CNVD-2021-45715)

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. Schneider Electric homeLYnk and spaceLYnk are vulnerable to an information disclosure vulnerability that could result in the program being corrupted...

5.9CVSS6.4AI score0.00817EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/01 12:00 a.m.32 views

Schneider Electric spaceLYnk OS Command Injection Vulnerability

The Schneider Electric spaceLYnk is a programmable logic controller from Schneider Electric, France. An input validation security vulnerability exists in the Schneider Electric spaceLYnk, which can be exploited by a remote attacker to submit a special request that can be used in the context of an...

7.8CVSS7.6AI score0.00215EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/01 12:00 a.m.11 views

Schneider Electric homeLYnk and spaceLYnk Path Traversal Vulnerability

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A path traversal vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. The vulnerabilities could be exploited by remote attackers to...

7.5CVSS7.1AI score0.01134EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/01 12:00 a.m.10 views

Schneider Electric homeLYnk and spaceLYnk Insufficient Protection Credentials Vulnerability

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker could exploit the vulnerability to cause unauthorized acces...

9.8CVSS6.8AI score0.0095EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/01 12:00 a.m.10 views

Schneider Electric homeLYnk and spaceLYnk Incorrect Privilege Management Vulnerability

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker can exploit the vulnerability to execute arbitrary code in...

7.8CVSS7.7AI score0.00263EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/01 12:00 a.m.27 views

Schneider Electric homeLYnk and spaceLYnk cryptographic signature vulnerability (CNVD-2021-45718)

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker can exploit the vulnerability to execute arbitrary code in...

7.2CVSS7.7AI score0.01EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/27 12:00 a.m.30 views

Schneider Electric HomeLYnk and SpaceLYnk Information Disclosure Vulnerability

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. An information disclosure vulnerability exists in Schneider Electric homeLYnk and spaceLYnk, which arises from an error in configuration or other...

6.5CVSS6.3AI score0.00796EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/27 12:00 a.m.21 views

Schneider Electric homeLYnk and spaceLYnk Cryptographic Signature Vulnerabilities

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk that stems from the presence of incorrect password signature verificatio...

7.2CVSS7.3AI score0.01EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/26 8:15 p.m.6 views

CVE-2021-22735

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device...

7.2CVSS6.3AI score0.01EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/26 8:15 p.m.6 views

CVE-2021-22737

Insufficiently Protected Credentials vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack...

9.8CVSS5.8AI score0.0095EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/26 8:15 p.m.25 views

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

9.8CVSS0.00632EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/26 8:15 p.m.27 views

CVE-2021-22739

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured...

5.9CVSS0.00817EPSS
SaveExploits0References1
Rows per page
Query Builder