CVE-2018-7779

HIGH

Schneider Electric Wiser for KNX <2.1.0 - Info Disclosure

Title source: llm

Description

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.schneider-electric.com/en/download/document/SEVD-2018-109-02/

Scores

CVSS v3 7.5

EPSS 0.0037

EPSS Percentile 58.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (3)

schneider-electric/homelynk_firmware < 2.0.1

schneider-electric/spacelynk_firmware < 2.1.0

schneider-electric/wiser_for_knx_firmware < 2.1.0

Published Jul 03, 2018

Tracked Since Feb 18, 2026