Vulnerabilities > Schneider Electric > Homelynk Controller Lss100100 Firmware

DATE CVE VULNERABILITY TITLE RISK
2017-04-11 CVE-2017-7689 Command Injection vulnerability in Schneider-Electric Homelynk Controller Lss100100 Firmware 1.3.0
A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.
network
low complexity
schneider-electric CWE-77
critical
 9.8
9.8
2017-02-13 CVE-2017-5157 Cross-site Scripting vulnerability in Schneider Electric Homelynk Controller Lss100100 Firmware 1.3.0
An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0.
network
low complexity
schneider-electric CWE-79
6.1
6.1