CVE-2022-30235

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

CVE-2022-30236

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

PT-2022-2791

Name of the Vulnerable Software and Affected Versions Wiser Smart versions prior to 4.5 Wiser Controller EER21000 versions prior to 4.5 Wiser Controller EER21001 versions prior to 4.5 Description The issue is related to incorrect resource transfer between spheres, which could allow an attacker to...

PT-2022-3206

Name of the Vulnerable Software and Affected Versions Wiser Smart versions 4.5 and prior EER21000 versions 4.5 and prior EER21001 versions 4.5 and prior Description A Use of Hard-coded Credentials issue exists, potentially allowing arbitrary code execution when root level access is obtained. This...

PT-2022-2793

Name of the Vulnerable Software and Affected Versions Wiser Smart versions 4.5 and prior EER21000 versions 4.5 and prior EER21001 versions 4.5 and prior Description A vulnerability exists that could allow unauthorized access when an attacker uses brute force, due to improper restriction of...

PT-2022-2792

Name of the Vulnerable Software and Affected Versions Wiser Smart versions 4.5 and prior EER21000 versions 4.5 and prior EER21001 versions 4.5 and prior Description A vulnerability exists due to improper input validation, which could allow malicious manipulation of the product when a user is...

PT-2022-2758

Name of the Vulnerable Software and Affected Versions Wiser Smart versions prior to 4.5 Wiser Controller EER21000 versions prior to 4.5 Wiser Controller EER21001 versions prior to 4.5 Description The issue is related to the lack of encryption measures for sensitive data. This could allow a remote...

PT-2022-3205

Name of the Vulnerable Software and Affected Versions Wiser Smart versions prior to 4.5 Wiser Controller EER21000 versions prior to 4.5 Wiser Controller EER21001 versions prior to 4.5 Description The issue is related to errors in the authentication procedure of the Wiser Smart programmable logic...

PT-2022-3355

Name of the Vulnerable Software and Affected Versions Wiser Smart versions prior to V4.5 EER21000 versions prior to V4.5 EER21001 versions prior to V4.5 Squirrel affected versions not specified Description The issue is related to improper input validation, which could lead to potential remote cod...

CVE-2021-22783

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door All versions...

CVE-2021-22783

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door All versions...

Information disclosure

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door All versions...

CVE-2021-22783

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door All versions...

CVE-2021-22783

CVE-2021-22783 affects Schneider Electric/Ritto Wiser Door (all versions). A CWE-200 information exposure vulnerability could enable session hijacking during communication between the door panel and the door. The available sources in connected documents confirm the issue and affected product, but...

Schneider Electric Ritto Wiser Door 安全漏洞

The Schneider Electric Ritto Wiser Door is an intelligent access control system from Schneider Electric France. A security vulnerability exists in the Schneider Electric Ritto Wiser Door that could allow session hijacking when the door panel communicates with the door...

CVE-2021-22783: Exposure of Sensitive Information to an Unauthorized Actor

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door All versions...

PT-2022-6535

Name of the Vulnerable Software and Affected Versions Ritto Wiser Door All versions Description The issue is related to information exposure during data exchange, potentially allowing a session hijack when the door panel communicates with the door. Recommendations For all versions, update the...

CVE-2021-22806

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk V2.6.1 and prior, Wiser for KNX V2.6.1 and prior, fellerLYnk V2.6.1 and prior...

CVE-2021-22806

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk V2.6.1 and prior, Wiser for KNX V2.6.1 and prior, fellerLYnk V2.6.1 and prior...

CVE-2021-22806

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk V2.6.1 and prior, Wiser for KNX V2.6.1 and prior, fellerLYnk V2.6.1 and prior...