5.3

CVE-2022-22809

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Spacelynk Firmware Version <= 2.6.2
   Schneider-electric ≫ Spacelynk Version -
Schneider-electric ≫ Fellerlynk Firmware Version <= 2.6.2
   Schneider-electric ≫ Fellerlynk Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.513
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
Patch
Vendor Advisory