VDB

CVE-2022-22810

CVE-2022-22810 PUBLISHED CVSS 9.800000190734863 CRITICAL

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

EPSS 0.30% · 53.7th percentile

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.30%
53.7th percentile

Affected Products

VendorProductVersions
schneider-electricfellerlynk_firmware0
schneider-electricwiser_for_knx_firmware0
schneider-electricspacelynk_firmware0
n/aspaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

Timeline

  • Feb 9, 2022 CVE Published
  • Feb 10, 2022 EPSS Score
  • Apr 3, 2022 EPSS Score
  • May 26, 2022 EPSS Score
  • Jul 18, 2022 EPSS Score
  • Sep 8, 2022 EPSS Score
  • Oct 31, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›