CVE Catalog

CVE-2017-7689

Critical
Published: Translated: NVD NIST

Summary

All versions of Schneider Electric's homeLYnk Controller prior to version 1.5.0 contain a command injection vulnerability.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary commands on the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the homeLYnk Controller to version 1.5.0 or later to mitigate this vulnerability.

Original NVD description (English source)

A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS