CVE-2021-22806
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk (V2.6.1 and prior), Wiser for KNX (V2.6.1 and prior), fellerLYnk (V2.6.1 and prior)
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2022-02-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-669
Affected products
- Fellerlynk Firmware (Schneider-electric)
- Spacelynk Firmware (Schneider-electric)
- Wiser For Knx Firmware (Schneider-electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-285-01