CVE-2021-22738: Critical severity schneider-electric spacelynk firmware vulnerability
Published May 26, 2021
·Updated
Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack.
Affected Software
4 affected components
Schneider-electric Spacelynk Firmware<=2.6.0
Schneider-electric Spacelynk
Schneider-electric Homelynk Firmware<=2.6.0
Schneider-electric Homelynk
Event History
May 26, 2021
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-22738?
CVE-2021-22738 is a vulnerability that exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior.
2
What is the severity of CVE-2021-22738?
CVE-2021-22738 has a severity rating of 9.8 (Critical).
3
How does CVE-2021-22738 affect Schneider-electric Spacelynk Firmware?
Schneider-electric Spacelynk Firmware up to version 2.6.0 is affected by CVE-2021-22738.
4
How does CVE-2021-22738 affect Schneider-electric Homelynk Firmware?
Schneider-electric Homelynk Firmware up to version 2.6.0 is affected by CVE-2021-22738.
5
How can CVE-2021-22738 be fixed?
To fix CVE-2021-22738, it is recommended to update homeLYnk (Wiser For KNX) and spaceLYnk firmware to version 2.6.0 or later.