Description
An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Schneider Electric homeLYnk Controller prior to V1.5.0 | Schneider Electric homeLYnk Controller prior to V1.5.0 | — |
Advisories 1
- ICSA-17-019-01A Schneider Electric homeLYnk Controller (Update A) CISA ICS & IT advisories · Apr 13, 2017