PT-2021-15183 · Spacelynk+1 · Spacelynk+1

Published 2021-05-26 · Updated 2021-06-04 · CVE-2021-22734

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions homeLYnk (Wiser For KNX) versions prior to V2.60 spaceLYnk versions prior to V2.60

Description The issue is related to an Improper Verification of Cryptographic Signature, which could lead to remote code execution when an attacker loads unauthorized code.

Recommendations For homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version that includes the fix for this issue. For spaceLYnk versions prior to V2.60, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2021-22734

Affected Products

Homelynk

Spacelynk

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22734 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22734 · Vendor Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 · Vendor Advisory
• https://t.me/cvenotify/15566 · Telegram Post