CVE-2021-22740: Infoleak
First published: Wed May 26 2021(Updated: )
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Spacelynk Firmware | <=2.6.0 | |
| Schneider-electric Spacelynk | ||
| Schneider-electric Homelynk Firmware | <=2.6.0 | |
| Schneider-electric Homelynk |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-22740?
CVE-2021-22740 is an Information Exposure vulnerability that exists in homeLYnk (Wiser For KNX) and spaceLYnk v2.60 and prior versions, which could expose information when an unauthorized file is uploaded.
What is the severity of CVE-2021-22740?
The severity of CVE-2021-22740 is medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2021-22740?
homeLYnk (Wiser For KNX) and spaceLYnk v2.60 and prior versions are affected by CVE-2021-22740.
How can CVE-2021-22740 be exploited?
CVE-2021-22740 can be exploited by uploading an unauthorized file.
Is Schneider-electric Spacelynk vulnerable to CVE-2021-22740?
No, Schneider-electric Spacelynk is not vulnerable to CVE-2021-22740.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/source
- vendor/schneider-electric
- canonical/schneider-electric spacelynk firmware
- version/schneider-electric spacelynk firmware/2.6.0
- canonical/schneider-electric spacelynk
- canonical/schneider-electric homelynk firmware
- version/schneider-electric homelynk firmware/2.6.0
- canonical/schneider-electric homelynk