Known Vulnerabilities for Wiser For Knx Firmware by Schneider-electric
Listed below are 8 of the newest known vulnerabilities associated with "Wiser For Knx Firmware" by "Schneider-electric".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-22812 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that coul... | 6.1 - MEDIUM | 2022-02-09 | 2022-02-16 |
| CVE-2022-22811 | A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, lead... | 8.1 - HIGH | 2022-02-09 | 2023-11-07 |
| CVE-2022-22810 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to man... | 9.8 - CRITICAL | 2022-02-09 | 2022-02-16 |
| CVE-2022-22809 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch conf... | 5.3 - MEDIUM | 2022-02-09 | 2023-02-22 |
| CVE-2021-22806 | A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthoriz... | 7.5 - HIGH | 2022-02-11 | 2022-02-22 |
| CVE-2020-7525 | Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wise... | 7.5 - HIGH | 2020-08-31 | 2020-09-04 |
| CVE-2019-6832 | A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions befor... | 8.3 - HIGH | 2019-09-17 | 2022-09-03 |
| CVE-2018-7779 | In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unp... | 7.5 - HIGH | 2018-07-03 | 2020-08-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Schneider-electric | Wiser For Knx Firmware | 2.4.0 | All | All | All |