Read the docs

Schneider Electric

Records889All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical178CVSS 9.0–10.0
CVSS high452CVSS 7.0–8.9

Exploited now

Schneider Electric records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Homelynk Firmware · all components

Priority MEDIUM 44

Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0095 Published 2021-05-26 No fix listed CWE-307
Priority MEDIUM 43

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force att…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00632 Published 2021-05-26 No fix listed CWE-327
Priority LOW 35

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized fil…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01134 Published 2021-05-26 No fix listed CWE-22
Priority LOW 34

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01 Published 2021-05-26 No fix listed CWE-347
Priority LOW 34

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01 Published 2021-05-26 No fix listed CWE-347
Priority LOW 34

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00263 Published 2021-05-26 No fix listed CWE-269
Priority LOW 33

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2021-05-26 No fix listed CWE-269
Priority LOW 30

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00796 Published 2021-05-26 No fix listed CWE-200
Priority LOW 28

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00817 Published 2021-05-26 No fix listed CWE-200
Open these records in search →