Wiser For Knx Firmware (Schneider-electric) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2022-02-11. Vendor: Schneider-electric.

CVEs of Wiser For Knx Firmware

• CVE-2021-22806 - CVSS 7.5 (high), 2022-02-11: A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a…
• CVE-2022-22809 - CVSS 5.3 (medium), 2022-02-09: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized…
• CVE-2022-22812 - CVSS 6.1 (medium), 2022-02-09: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise…
• CVE-2022-22811 - CVSS 8.1 (high), 2022-02-09: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the override of the…
• CVE-2022-22810 - CVSS 9.8 (critical), 2022-02-09: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous…
• CVE-2020-7525 - CVSS 7.5 (high), 2020-08-31: Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk)…
• CVE-2019-6832 - CVSS 8.3 (high), 2019-09-17: A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as…
• CVE-2018-7779 - CVSS 7.5 (high), 2018-07-03: In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow…