CVE-2022-22809: Medium severity schneider-electric spacelynk firmware vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-22809.

Q: What is the severity of CVE-2022-22809?

The severity of CVE-2022-22809 is medium with a CVSS score of 5.3.

Q: What is the CWE ID for this vulnerability?

The CWE ID for this vulnerability is CWE-306.

Q: Which products are affected by CVE-2022-22809?

The affected products are spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), and FellerLYnk (V2.6.2 and prior).

Q: How can the vulnerability be exploited?

The vulnerability can be exploited by an attacker attempting to modify the touch configurations in an unauthorized manner.

Published Feb 9, 2022

Updated

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

Affected Software

6 affected components

Schneider-electric Spacelynk Firmware<=2.6.2

Schneider-electric Spacelynk

Schneider-electric Wiser For Knx Firmware<=2.6.2

Schneider-electric Wiser For Knx

Schneider-electric Fellerlynk Firmware<=2.6.2

Schneider-electric Fellerlynk

Remediation

Patch Available

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04

Event History

Feb 9, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-22809.

What is the severity of CVE-2022-22809?

The severity of CVE-2022-22809 is medium with a CVSS score of 5.3.

What is the CWE ID for this vulnerability?