Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Priority LOW 30

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00796 Published 2021-05-26 No fix listed CWE-200
Priority LOW 28

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00817 Published 2021-05-26 No fix listed CWE-200
Priority MEDIUM 43

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force att…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00632 Published 2021-05-26 No fix listed CWE-327
Priority LOW 35

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized fil…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01134 Published 2021-05-26 No fix listed CWE-22
Priority LOW 34

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01 Published 2021-05-26 No fix listed CWE-347
Priority LOW 34

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01 Published 2021-05-26 No fix listed CWE-347
Priority LOW 33

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2021-05-26 No fix listed CWE-269
Priority LOW 34

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00263 Published 2021-05-26 No fix listed CWE-269
Priority MEDIUM 44

Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0095 Published 2021-05-26 No fix listed CWE-307