PT-2021-15185 · Spacelynk+1 · Spacelynk+1

Published 2021-05-26 · Updated 2023-01-20 · CVE-2021-22737

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions homeLYnk (Wiser For KNX) versions prior to V2.60 spaceLYnk versions prior to V2.60

Description The issue allows for unauthorized access when credentials are discovered after a brute force attack due to insufficient protection of credentials.

Recommendations For homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version newer than V2.60 to resolve the issue. For spaceLYnk versions prior to V2.60, update to a version newer than V2.60 to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2021-22737

Affected Products

Homelynk

Spacelynk

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-22737 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22737 · Vendor Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 · Vendor Advisory