CVE-2021-22733

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 69.35%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric Homelynk Firmware Schneider-electric Spacelynk Firmware

Timeline

PublishedMay 26

Latest updateMay 24

Description

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5homelynk_(wiser_for_knx)_and_spacelynk_v2.60_and_priorhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior

▶NVDschneider-electric/homelynk_firmware2.6.0

▶NVDschneider-electric/spacelynk_firmware2.6.0

🔴Vulnerability Details

GHSA

GHSA-6xx3-j36r-9j4v: Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2022-05-24

▶

CVEList

CVE-2021-22733: Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2021-05-26

▶