CVE-2021-22735

Katalog CVE

CVSS 7.2 · High EPSS 1,0%

Kerentanan Improper Verification of Cryptographic Signature pada schneider-electric spacelynk firmware, schneider-electric homelynk firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device.

Rincian

Terbit di NVD

26 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 61,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04 advisory vendor