CVE-2021-22738

CWE-327 — Broken Cryptographic Algorithm3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.2%
top 59.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Schneider-electric Homelynk FirmwareSchneider-electric Spacelynk Firmware
Timeline
PublishedMay 26
Latest updateMay 24

Description

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5homelynk_(wiser_for_knx)_and_spacelynk_v2.60_and_priorhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior

🔴Vulnerability Details

2
GHSA
GHSA-2vxv-gxpx-wc5c: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2022-05-24
▶
CVEList
CVE-2021-22738: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2021-05-26
▶
CVE-2021-22738 (CRITICAL CVSS 9.8) | Use of a Broken or Risky Cryptograp | cvebase.io