Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.
References
Link | Resource |
---|---|
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 | Vendor Advisory |
Configurations
History
04 Jun 2021, 14:21
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 7.2 |
CPE | cpe:2.3:h:schneider-electric:homelynk:-:*:*:*:*:*:*:* cpe:2.3:o:schneider-electric:spacelynk_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:schneider-electric:homelynk_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:schneider-electric:spacelynk:-:*:*:*:*:*:*:* |
|
References | (MISC) https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 - Vendor Advisory |
26 May 2021, 20:49
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-347 |
26 May 2021, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-05-26 20:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-22735
Mitre link : CVE-2021-22735
CVE.ORG link : CVE-2021-22735
JSON object : View
Products Affected
schneider-electric
- spacelynk
- homelynk
- homelynk_firmware
- spacelynk_firmware
CWE
CWE-347
Improper Verification of Cryptographic Signature