Brute Force Vulnerability in SpaceLYnk and Wiser for KNX by Schneider Electric

CVE-2020-7525

Summary

An improper restriction of excessive authentication attempts vulnerability affects all hardware versions of SpaceLYnk and Wiser for KNX. This flaw can be exploited by attackers using brute force techniques to guess user passwords, potentially compromising the security and integrity of the systems. Organizations using these products should implement additional security measures to safeguard against unauthorized access, such as account lockout policies and rate limiting. For further guidance, refer to Schneider Electric's security advisory.

References