Vulnerability Description
Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Spacelynk Firmware | < 2.5.1 |
| Schneider-Electric | Spacelynk | - |
| Schneider-Electric | Wiser For Knx Firmware | < 2.5.1 |
| Schneider-Electric | Wiser For Knx | - |
Related Weaknesses (CWE)
References
- https://www.se.com/ww/en/download/document/SEVD-2020-224-02/Vendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-224-02/Vendor Advisory
FAQ
What is CVE-2020-7525?
CVE-2020-7525 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a pass...
How severe is CVE-2020-7525?
CVE-2020-7525 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7525?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Spacelynk Firmware, Schneider-Electric Spacelynk, Schneider-Electric Wiser For Knx Firmware, Schneider-Electric Wiser For Knx.