8.3
CVE-2019-6832
- EPSS 1.46%
- Veröffentlicht 17.09.2019 20:15:12
- Zuletzt bearbeitet 21.11.2024 04:47:14
- Erkennungen
LoginA CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control when an attacker bypasses the authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Wiser For Knx Firmware Version < 2.4.0
Schneider-electric ≫ Spacelynk Firmware Version < 2.4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.46% | 0.702 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.3 | 2.8 | 5.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
https://www.schneider-electric.com/en/download/document/SEVD-2019-225-07/