CVE-2021-22734: High severity schneider-electric spacelynk firmware vulnerability
Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22734 vulnerability?
CVE-2021-22734 is an Improper Verification of Cryptographic Signature vulnerability that exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior versions, which could allow remote code execution by loading unauthorized code.
How can the CVE-2021-22734 vulnerability affect me?
CVE-2021-22734 vulnerability can potentially allow an attacker to remotely execute code on your homeLYnk or spaceLYnk device by loading unauthorized code.
What is the severity of CVE-2021-22734 vulnerability?
The severity of CVE-2021-22734 vulnerability is high, with a CVSS score of 7.2.
Is Schneider-electric Spacelynk firmware vulnerable to CVE-2021-22734?
Yes, Schneider-electric Spacelynk firmware version up to and including 2.6.0 is vulnerable to CVE-2021-22734.
How can I fix CVE-2021-22734 vulnerability?
To fix CVE-2021-22734 vulnerability, it is recommended to update your homeLYnk or spaceLYnk firmware to a version beyond 2.6.0.