CVE-2020-7525

HIGH

7.5

Description

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/31/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

schneider-electric:spacelynkschneider-electric:spacelynk_firmwareschneider-electric:wiser_for_knxschneider-electric:wiser_for_knx_firmware

Faiblesses (CWE)

CWE-307

References

https://www.se.com/ww/en/download/document/SEVD-2020-224-02/(cybersecurity@se.com)

https://www.se.com/ww/en/download/document/SEVD-2020-224-02/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.