CVE-2021-22732: High severity schneider-electric spacelynk firmware vulnerability
Published May 26, 2021
·Updated
Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server.
Affected Software
4 affected components
Schneider-electric Spacelynk Firmware<=2.6.0
Schneider-electric Spacelynk
Schneider-electric Homelynk Firmware<=2.6.0
Schneider-electric Homelynk
Event History
May 26, 2021
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-22732?
CVE-2021-22732 is an Improper Privilege Management vulnerability that exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior.
2
What is the severity of CVE-2021-22732?
The severity of CVE-2021-22732 is high, with a severity value of 7.8.
3
How does CVE-2021-22732 affect Schneider-electric Spacelynk Firmware?
CVE-2021-22732 affects Schneider-electric Spacelynk Firmware versions up to and including 2.6.0.
4
How does CVE-2021-22732 affect Schneider-electric Homelynk Firmware?
CVE-2021-22732 affects Schneider-electric Homelynk Firmware versions up to and including 2.6.0.
5
How can I fix CVE-2021-22732?
To fix CVE-2021-22732, it is recommended to update the affected software to a version that includes a patch for the vulnerability.