Vulnerability Description
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Spacelynk Firmware | <= 2.6.2 |
| Schneider-Electric | Spacelynk | - |
| Schneider-Electric | Wiser For Knx Firmware | <= 2.6.2 |
| Schneider-Electric | Wiser For Knx | - |
| Schneider-Electric | Fellerlynk Firmware | <= 2.6.2 |
| Schneider-Electric | Fellerlynk | - |
Related Weaknesses (CWE)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04PatchVendor Advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04PatchVendor Advisory
FAQ
What is CVE-2022-22812?
CVE-2022-22812 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes...
How severe is CVE-2022-22812?
CVE-2022-22812 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-22812?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Spacelynk Firmware, Schneider-Electric Spacelynk, Schneider-Electric Wiser For Knx Firmware, Schneider-Electric Wiser For Knx, Schneider-Electric Fellerlynk Firmware.