Schneider-electric Homelynk Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Homelynk Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2021-22737 — CVSS 9.8 (critical): Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause…
• CVE-2021-22738 — CVSS 9.8 (critical): Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could…
• CVE-2021-22732 — CVSS 7.8 (high): Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code…
• CVE-2021-22733 — CVSS 7.8 (high): Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access…
• CVE-2018-7779 — CVSS 7.5 (high): In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP…
• CVE-2021-22736 — CVSS 7.5 (high): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and…
• CVE-2021-22735 — CVSS 7.2 (high): Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could…
• CVE-2021-22734 — CVSS 7.2 (high): Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could…
• CVE-2021-22740 — CVSS 6.5 (medium): Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be…
• CVE-2021-22739 — CVSS 5.9 (medium): Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be…