CVE-2021-22736

CWE-22 — Path Traversal3 documents3 sources

Severity

7.5HIGH

EPSS

0.4%

top 39.84%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric Homelynk Firmware Schneider-electric Spacelynk Firmware

Timeline

PublishedMay 26

Latest updateMay 24

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5homelynk_(wiser_for_knx)_and_spacelynk_v2.60_and_priorhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior

▶NVDschneider-electric/homelynk_firmware2.6.0

▶NVDschneider-electric/spacelynk_firmware2.6.0

🔴Vulnerability Details

GHSA

GHSA-xf6c-g664-4qp4: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2022-05-24

▶

CVEList

CVE-2021-22736: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2021-05-26

▶