Vulnerability Details CVE-2017-7689
A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.032
EPSS Ranking 86.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-02
- http://www.securityfocus.com/bid/97585
- https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01A
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-02
- http://www.securityfocus.com/bid/97585
- https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01A
Products affected by CVE-2017-7689
-
cpe:2.3:h:schneider-electric:homelynk_controller_lss100100:-
-
cpe:2.3:o:schneider-electric:homelynk_controller_lss100100_firmware:1.3.0