CVE-2022-34753: Schneider Electric Spacelogic C-Bus Home Controller Firmware

High severity, CVSS 8.8. EPSS: 70.5% chance of exploitation in the next 30 days.

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Homer Controller MK2 (V1.31.460 and prior)

Affected products

  • Schneider Electric Spacelogic C-Bus Home Controller Firmware: up to and including 1.31.460

Published 2022-07-13. Last modified 2026-06-17.