Vulnerabilities > Schneider Electric > Spacelynk Firmware > 2.5.1

DATE CVE VULNERABILITY TITLE RISK
2021-05-26 CVE-2021-22737 Improper Restriction of Excessive Authentication Attempts vulnerability in Schneider-Electric Homelynk Firmware and Spacelynk Firmware
Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.
network
low complexity
schneider-electric CWE-307
critical
9.8
2021-05-26 CVE-2021-22738 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Schneider-Electric Homelynk Firmware and Spacelynk Firmware
Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack.
network
low complexity
schneider-electric CWE-327
5.0
2021-05-26 CVE-2021-22739 Information Exposure vulnerability in Schneider-Electric Homelynk Firmware and Spacelynk Firmware
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.
4.3
2021-05-26 CVE-2021-22740 Information Exposure vulnerability in Schneider-Electric Homelynk Firmware and Spacelynk Firmware
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.
network
low complexity
schneider-electric CWE-200
4.0