Summary
Schneider Electric is aware of a vulnerability in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility and simplifies building management.
Wiser for KNX products are personalized energy efficiency solutions, offering a complete system based on open protocols: KNX, Modbus, BACnet and IP.
fellerLYnk offers more flexibility in visualization and trend recording as well as functions such as presence simulation or time switches that the end customer can easily manage.
Failure to apply the remediations provided below may risk a cross-origin resource sharing attack, which could result in exfiltrated data and unauthorized access.
Vulnerabilities 1
-
Unscored —
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unau…
Revision history
-
#1.0.0
Original Release
References
-
spaceLYnk, Wiser For KNX, fellerLYnk - SEVD-2021-285-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-285-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-285-01_spaceLYnk_WiserForKNX_fellerLYnk_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/