CVE-2021-22740

Name of the Vulnerable Software and Affected Versions Schneider Electric spaceLYnk versions prior to V2.60 Schneider Electric homeLYnk (Wiser For KNX) versions prior to V2.60

Description The issue is related to a lack of protection for service data, which could allow a remote attacker to expose protected information. An unauthorized file upload could also cause information to be exposed.

Recommendations For Schneider Electric spaceLYnk versions prior to V2.60, update to a version that includes the necessary security patches to protect service data. For Schneider Electric homeLYnk (Wiser For KNX) versions prior to V2.60, update to a version that includes the necessary security patches to protect against information exposure when uploading files. As a temporary workaround, consider restricting access to the file upload functionality in both spaceLYnk and homeLYnk until a patch is available.