CVE-2021-22740

published 2021-05-26

CVE-2021-22740: Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an…

Priority P4 33 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	homelynk_firmware	<= 2.6.0	—
schneider-electric	spacelynk_firmware	<= 2.6.0	—

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200