Schneider Electric Homelynk vulnerabilities
10 vulnerabilities
Known vulnerabilities in Schneider Electric Homelynk, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-7779schneider electric sewiser for knx+3
EPSS score1.39%
In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access.CVE-2021-22735schneider-electrichomelynk_firmware+1EPSS score1.00%
Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.CVE-2021-22738schneider-electrichomelynk_firmware+1EPSS score0.63%
Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack.CVE-2021-22740schneider-electrichomelynk_firmware+1EPSS score0.80%
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.CVE-2021-22736schneider-electrichomelynk_firmware+1EPSS score1.13%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded.CVE-2021-22732schneider-electrichomelynk_firmware+1EPSS score0.26%
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server.CVE-2021-22739schneider-electrichomelynk_firmware+1EPSS score0.82%
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.CVE-2021-22734schneider-electrichomelynk_firmware+1EPSS score1.00%
Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code.CVE-2021-22733schneider-electrichomelynk_firmware+1EPSS score0.21%
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder.CVE-2021-22737schneider-electrichomelynk_firmware+1EPSS score0.95%
Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.