PT-2021-15184 · Spacelynk+1 · Spacelynk+1

Published 2021-05-26 · Updated 2021-06-04 · CVE-2021-22735

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions homeLYnk (Wiser For KNX) versions prior to V2.60 spaceLYnk versions prior to V2.60

Description The issue is related to an Improper Verification of Cryptographic Signature, which could allow remote code execution when unauthorized code is copied to the device.

Recommendations For homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version later than V2.60. For spaceLYnk versions prior to V2.60, update to a version later than V2.60.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2021-22735

Affected Products

Homelynk

Spacelynk

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22735 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22735 · Vendor Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 · Vendor Advisory
• https://t.me/cvenotify/15568 · Telegram Post