CVE-2021-22739

Name of the Vulnerable Software and Affected Versions Schneider Electric homeLYnk versions prior to V2.60 Schneider Electric spaceLYnk versions prior to V2.60

Description The issue is related to a lack of protection for service data in the firmware of Schneider Electric spaceLYnk and homeLYnk logical controllers. This could allow a remote attacker to compromise the device during its initial setup.

Recommendations For Schneider Electric homeLYnk versions prior to V2.60, update to a version that includes the necessary security patches to prevent information exposure. For Schneider Electric spaceLYnk versions prior to V2.60, update to a version that includes the necessary security patches to prevent information exposure. As a temporary workaround, consider restricting access to the devices during the initial setup process until a patch is applied.