Cross-Site Scripting Vulnerability in Schneider Electric SpaceLYnk and Wiser for KNX
CVE-2022-22812
6.1MEDIUM
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 9 February 2022
What is CVE-2022-22812?
A Cross-Site Scripting (XSS) vulnerability exists in Schneider Electric's spaceLYnk, Wiser for KNX, and fellerLYnk products, allowing attackers to inject arbitrary JavaScript code. This vulnerability can enable unauthorized access to web sessions, compromising sensitive information and user interactions in affected versions (V2.6.2 and prior). It is crucial for users of these products to implement security measures to mitigate risks associated with this vulnerability.
Affected Version(s)
spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)