CVE-2022-22809

CWE-306 — Missing Authentication4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.5%
top 33.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Schneider-electric Fellerlynk FirmwareSchneider-electric Spacelynk FirmwareSchneider-electric Wiser FOR KNX Firmware
Timeline
PublishedFeb 9
Latest updateJan 18

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

Patches

Patch: download.schneider-electric.com ↗Patch: download.schneider-electric.com ↗

🔴Vulnerability Details

3
OSV
sudo vulnerabilities↗2023-01-18
▶
GHSA
GHSA-qrhr-2vcp-5jrh: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthor↗2022-02-11
▶
CVEList
CVE-2022-22809: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthor↗2022-02-09
▶
CVE-2022-22809 (MEDIUM CVSS 5.3) | A CWE-306: Missing Authentication f | cvebase.io