CVE-2017-7689 A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.
CriticalCVSS 9.8
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric homelynk controller lss100100 firmware | < 1.5.0 | 1.5.0 |
References
- download.schneider-electric.com vendor-advisory
- 97585 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource