First published: Wed Feb 09 2022(Updated: )
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider-electric Spacelynk Firmware | <=2.6.2 | |
Schneider-electric Spacelynk | ||
Schneider-electric Wiser For Knx Firmware | <=2.6.2 | |
Schneider-electric Wiser For Knx | ||
Schneider-electric Fellerlynk Firmware | <=2.6.2 | |
Schneider-electric Fellerlynk |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2022-22809.
The severity of CVE-2022-22809 is medium with a CVSS score of 5.3.
The CWE ID for this vulnerability is CWE-306.
The affected products are spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), and FellerLYnk (V2.6.2 and prior).
The vulnerability can be exploited by an attacker attempting to modify the touch configurations in an unauthorized manner.