CVE-2022-22812 — Vulnetix

CVE-2022-22812 PUBLISHED CVSS 6.099999904632568 MEDIUM

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

EPSS 0.32% · 55.1th percentile

Risk Scores

CVSS 3.1

6.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

0.32%

55.1th percentile

Affected Products

Vendor	Product	Versions
n/a	spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)	spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
schneider-electric	spacelynk_firmware	0
schneider-electric	fellerlynk_firmware	0
schneider-electric	wiser_for_knx_firmware	0

Exploit Intelligence

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04 (circl)

Timeline

Feb 9, 2022 CVE Published
Feb 10, 2022 EPSS Score
Apr 3, 2022 EPSS Score
May 26, 2022 EPSS Score
Jul 18, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Oct 31, 2022 EPSS Score
Dec 22, 2022 EPSS Score
Feb 13, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 6, 2023 EPSS Score
May 28, 2023 EPSS Score

References

Open in Interactive Console →