CVE-2021-22740

CWE-200 — Information Exposure3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.3%

top 44.34%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric Homelynk Firmware Schneider-electric Spacelynk Firmware

Timeline

PublishedMay 26

Latest updateMay 24

Description

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5homelynk_(wiser_for_knx)_and_spacelynk_v2.60_and_priorhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior

▶NVDschneider-electric/homelynk_firmware2.6.0

▶NVDschneider-electric/spacelynk_firmware2.6.0

🔴Vulnerability Details

GHSA

GHSA-6wqw-44p4-565j: Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2022-05-24

▶

CVEList

CVE-2021-22740: Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2↗2021-05-26

▶