{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"state":"PUBLISHED","cveId":"CVE-2022-22809","assignerOrgId":"076d1eb6-cfab-4401-b34d-6dfc2a413bdb","assignerShortName":"schneider","dateUpdated":"2024-08-03T03:21:49.171Z","dateReserved":"2022-01-07T00:00:00.000Z","datePublished":"2022-02-09T00:00:00.000Z"},"containers":{"cna":{"providerMetadata":{"orgId":"076d1eb6-cfab-4401-b34d-6dfc2a413bdb","shortName":"schneider","dateUpdated":"2023-01-17T00:00:00.000Z"},"descriptions":[{"lang":"en","value":"A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)"}],"affected":[{"vendor":"n/a","product":"spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)","versions":[{"version":"spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)","status":"affected"}]}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04"}],"problemTypes":[{"descriptions":[{"type":"CWE","lang":"en","description":"CWE-306: Missing Authentication for Critical Function","cweId":"CWE-306"}]}]},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:21:49.171Z"},"title":"CVE Program Container","references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04","tags":["x_transferred"]}]}]}}