CVE-2021-22737: Schneider Electric Homelynk Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.

Affected products

• Schneider Electric Homelynk Firmware: up to and including 2.6.0
• Schneider Electric Spacelynk Firmware: up to and including 2.6.0

Published 2021-05-26. Last modified 2026-06-17.