PT-2022-15692 · Spacelynk+1 · Spacelynk+2

Published 2022-02-09 · Updated 2022-02-16 · CVE-2022-22810

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions spaceLYnk versions 2.6.2 and prior Wiser for KNX (formerly homeLYnk) versions 2.6.2 and prior fellerLYnk versions 2.6.2 and prior

Description A vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials, due to improper restriction of excessive authentication attempts.

Recommendations For spaceLYnk versions 2.6.2 and prior, update to a version later than 2.6.2 to resolve the issue. For Wiser for KNX (formerly homeLYnk) versions 2.6.2 and prior, update to a version later than 2.6.2 to resolve the issue. For fellerLYnk versions 2.6.2 and prior, update to a version later than 2.6.2 to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2022-22810

Affected Products

Wiser For Knx

Fellerlynk

Spacelynk

References · 3

• https://osv.dev/vulnerability/CVE-2022-22810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22810 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04 · Vendor Advisory