8.3
CVE-2019-6832
- EPSS 0.19%
- Veröffentlicht 17.09.2019 20:15:12
- Zuletzt bearbeitet 21.11.2024 04:47:14
- Quelle cybersecurity@se.com
- Teams Watchlist Login
- Unerledigt Login
A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control when an attacker bypasses the authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Wiser For Knx Firmware Version < 2.4.0
Schneider-electric ≫ Spacelynk Firmware Version < 2.4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.414 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.3 | 2.8 | 5.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.