Skip to content
OpenAdvisories
High ICSA-17-019-01A 2 CVEs

Schneider Electric homeLYnk Controller (Update A)

Published Jan 19, 2017 · Updated Apr 13, 2017 · Revision 2

Vendor: Schneider Electric Product: homeLYnk Controller LSS100100

Summary

ATTENTION: Remotely exploitable/low skill level to exploit

Vulnerabilities 2

  • Unscored —
    CVE-2017-5157

    An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYn…

  • Unscored —
    CVE-2017-7689

    A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.

Revision history

  1. #2

    ICSA-17-019-01A Schneider Electric homeLYnk Controller (Update A)

  2. #1

    ICSA-17-019-01 Schneider Electric homeLYnk Controller Cross-site Scripting

References