CVE-2022-22809

CVE-2022-22809 describes a CWE-306 Missing Authentication for Critical Function affecting Schneider Electric spaceLYnk, Wiser for KNX (formerly homeLYnk), and fellerLYnk, all with version 2.6.2 and prior. The issue allows unauthorized modification of touch configurations due to missing authentica...

CVE-2022-22809

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX formerly...

The vulnerability of the communication interface for Smartlink modular equipment, the microprogrammed wireless energy sensor PowerTag, and Wiser controllers, related to the use of insufficiently random values, allows intruders to gain increased privileges.

The vulnerability of the communication interface for Smartlink module equipment, the microprogrammed wireless energy sensor PowerTag, and Wiser controllers is related to the use of insufficiently random values. Exploiting this vulnerability could allow a remote attacker to exploit the system...

CVE-2021-22739

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured...

CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...

CVE-2021-22736

The CVE-2021-22736 entry describes a Path Traversal vulnerability in Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to version 2.60, where improper restriction of a pathname to a restricted directory can allow an unauthorized file upload to trigger a denial of service. Affected comp...

CVE-2021-22733

CVE-2021-22733 affects Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to/including v2.60. Root cause: Improper Privilege Management enabling shell access when unauthorized code is loaded into the system folder. Impact (per sources): local access with high integrity and confidentiali...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

Design/Logic Flaw

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

CVE-2020-7548

CVE-2020-7548 affects Smartlink, PowerTag, and Wiser Series Gateways. The connected sources describe a CWE-330 vulnerability (Use of Insufficiently Random Values) that could allow unauthorized logins. Details about affected versions, root cause specifics beyond the weak randomness issue, exploita...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

Multiple Schneider Electric Product Security Feature Issue Vulnerabilities

Schneider Electric Acti9 Smartlink SI D is a smart interface unit that realizes data communication between Acti9 electrical devices and Modbus devices. Schneider Electric Acti9 Smartlink SI D is an intelligent interface unit that enables data communication between Acti9 electrical devices and...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2020-7525

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX formerly homeLYnk which could allow an attacker to guess a password when brute force is used...

CVE-2020-7525

CVE-2020-7525 affects spaceLYnk and Wiser for KNX (formerly homeLYnk). The root cause is improper restriction of excessive authentication attempts, enabling password guessing via brute force. Impact is authentication bypass risk on all hardware versions. Public documents do not specify a vendor-p...

PT-2020-3651 · Spacelynk · Spacelynk +1

Name of the Vulnerable Software and Affected Versions: spaceLYnk affected versions not specified Wiser for KNX formerly homeLYnk affected versions not specified Description: The issue is related to an improper restriction of excessive authentication attempts, which could allow an attacker to gues...

Schneider Electric Wiser for KNX and spaceLYnk Authorization Issues Vulnerability

Schneider Electric spaceLYnk and Wiser for KNX are both products of the French company Schneider Electric. spaceLYnk is a programmable logic controller. wiser for KNX is a home automation control system. An authorization issue vulnerability exists in Schneider Electric spaceLYnk prior to version...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...

CVE-2019-6832

A CWE-287: Authentication vulnerability exists in spaceLYnk all versions before 2.4.0 and Wiser for KNX all versions before 2.4.0 - formerly known as homeLYnk, which could cause loss of control when an attacker bypasses the authentication...