CVE-2020-7525: High severity schneider-electric spacelynk firmware vulnerability
Published Aug 31, 2020
·Updated
Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.
Affected Software
4 affected components
Schneider-electric Spacelynk Firmware<2.5.1
Schneider-electric Spacelynk
Schneider-electric Wiser For Knx Firmware<2.5.1
Schneider-electric Wiser For Knx
Event History
Aug 31, 2020
CVE Published
via MITRE·04:12 PM
Data Sourced
via MITRE·04:12 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-7525 vulnerability?
CVE-2020-7525 is an Improper Restriction of Excessive Authentication Attempts vulnerability that exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk).
2
What is the severity of CVE-2020-7525?
The severity of CVE-2020-7525 is high with a CVSS score of 7.5.
3
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker using brute force to guess a password.
4
Which versions of Schneider-electric Spacelynk Firmware are affected by this vulnerability?
All versions up to 2.5.1 of Schneider-electric Spacelynk Firmware are affected.
5
Which versions of Schneider-electric Wiser For Knx Firmware are affected by this vulnerability?
All versions up to 2.5.1 of Schneider-electric Wiser For Knx Firmware are affected.