PT-2021-15182 · Spacelynk+1 · Spacelynk+1

Published 2021-05-26 · Updated 2021-06-04 · CVE-2021-22732

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions homeLYnk (Wiser For KNX) versions prior to V2.60 spaceLYnk versions prior to V2.60

Description The issue is related to improper privilege management, which could lead to code execution when an unauthorized code is loaded on the web server by an attacker.

Recommendations For homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version newer than V2.60 to resolve the issue. For spaceLYnk versions prior to V2.60, update to a version newer than V2.60 to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-22732

Affected Products

Homelynk

Spacelynk

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22732 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22732 · Vendor Advisory
• https://t.me/cvenotify/15560 · Telegram Post