CVE-2020-7525

Summary

CVE	CVE-2020-7525
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-08-31 17:15:00 UTC
Updated	2020-09-04 18:00:00 UTC
Description	Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.

Risk And Classification

Problem Types: CWE-307

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Schneider-electric	Spacelynk	-	All	All	All
Hardware	Schneider-electric	Spacelynk	-	All	All	All
Operating System	Schneider-electric	Spacelynk Firmware	All	All	All	All
Operating System	Schneider-electric	Spacelynk Firmware	All	All	All	All
Hardware	Schneider-electric	Wiser For Knx	-	All	All	All
Hardware	Schneider-electric	Wiser For Knx	-	All	All	All
Operating System	Schneider-electric	Wiser For Knx Firmware	All	All	All	All
Operating System	Schneider-electric	Wiser For Knx Firmware	All	All	All	All

References

Reference	Source	Link	Tags
Security Notification - spaceLYnk & Wiser for KNX (formerly homeLYnk) \| Schneider Electric	MISC	www.se.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

590782 Schneider ElectricspaceLYnk and Wiser for KNX Vulnerability (SEVD-2020-224-02)