CVE-2020-7525: Schneider Electric Spacelynk Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used.

Affected products

• Schneider Electric Spacelynk Firmware: before 2.5.1 (fixed in 2.5.1)
• Schneider Electric Wiser For KNX Firmware: before 2.5.1 (fixed in 2.5.1)

Published 2020-08-31. Last modified 2026-06-17.