Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22735

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.

Published

2021-05-26T20:15:09.063

Last Modified

2024-11-21T05:50:33.610

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-347
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric spacelynk_firmware ≤ 2.6.0 Yes
Hardware schneider-electric spacelynk - No
Operating System schneider-electric homelynk_firmware ≤ 2.6.0 Yes
Hardware schneider-electric homelynk - No
References