Brute Force Vulnerability in SpaceLYnk and Wiser for KNX by Schneider Electric
CVE-2020-7525

7.5HIGH

Key Information:

Vendor

Schneider Electric
Status
All Hardware Versions Of Spacelynk And Wiser For Knx (formerly Homelynk)
Vendor
CVE Published:
31 August 2020

What is CVE-2020-7525?

An improper restriction of excessive authentication attempts vulnerability affects all hardware versions of SpaceLYnk and Wiser for KNX. This flaw can be exploited by attackers using brute force techniques to guess user passwords, potentially compromising the security and integrity of the systems. Organizations using these products should implement additional security measures to safeguard against unauthorized access, such as account lockout policies and rate limiting. For further guidance, refer to Schneider Electric's security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

All hardware of spaceLYnk and Wiser for KNX (formerly homeLYnk) All hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk)

References

https://www.se.com/ww/en/download/document/SEVD-2020-224-02/
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.