CVE-2022-22809 — Vulnetix

CVE-2022-22809 PUBLISHED CVSS 5.300000190734863 MEDIUM

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

EPSS 0.19% · 40.5th percentile

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

0.19%

40.5th percentile

Affected Products

Vendor	Product	Versions
schneider-electric	spacelynk_firmware	0
schneider-electric	wiser_for_knx_firmware	0
schneider-electric	fellerlynk_firmware	0
n/a	spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)	spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

Exploit Intelligence

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04 (circl)

Timeline

Feb 9, 2022 CVE Published
Feb 10, 2022 EPSS Score
Apr 3, 2022 EPSS Score
May 26, 2022 EPSS Score
Jul 18, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Oct 31, 2022 EPSS Score
Dec 22, 2022 EPSS Score
Feb 13, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 6, 2023 EPSS Score
May 28, 2023 EPSS Score

References

Open in Interactive Console →