CVE-2017-5157: Schneider Electric Homelynk Controller LSS100100 Firmware

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code.

Affected products

Published 2017-02-13. Last modified 2026-06-17.