S4E just found a high [ai] pa ssl inspection control
high·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2022-34753 Scanner

Detects 'OS Command Injection' vulnerability in Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) affects v. 1.31.460 and prior.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
0
Times Used
by S4E users
0
Assets Scanned
domains & IPs
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2022-34753
8.8
CVSShigh
Exploitable remotely over the internet · low-privilege account sufficient.

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Homer Controller MK2 (V1.31.460 and prior)

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Affected
SpaceLogic C-Bus Home Controllerby Schneider Electric
AFFECTED< V1.31.460→SAFE ✓≥ V1.31.460
Updated Aug 19, 2026View on NVD →
Detail

The Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) is a product designed for home automation purposes. It controls lighting, temperature, audiovisual systems, and security in a residential setting. The device is compact in size and can be installed anywhere to provide centralized control. With the C-Bus Wiser Home Controller application, users can access and control their home appliances from their smartphones.

CVE-2022-34753 is a vulnerability detected in the SpaceLogic C-Bus Home Controller (5200WHC2). The vulnerability pertains to improper neutralization of special elements used in an OS command, which can lead to an OS command injection. Exploiting this vulnerability can result in a remote root exploit on the device, enabling attackers to gain complete control over the appliance and potentially access sensitive information.

When exploited, the CVE-2022-34753 vulnerability in the SpaceLogic C-Bus Home Controller (5200WHC2) can cause significant harm to the device owner. Information can be stolen, appliances can be manipulated for malicious purposes, and the safety of the occupants can be compromised. Attackers can exploit this vulnerability from anywhere in the world, making it a critical security concern.

Thanks to the revolutionary pro features of the s4e.io platform, users can easily and quickly learn about vulnerabilities in their digital assets. The platform provides detailed reports on potential security threats while enabling users to manage their digital assets more effectively. With s4e.io, users can stay ahead of the evolving threat landscape and protect their digital assets proactively.

 

REFERENCES

Solution Advice

To protect against this vulnerability, Schneider Electric recommends users take the following precautions:

  • Update the device firmware to the latest version.
  • Use strong, unique passwords for the administrator account.
  • Disable SSH, Telnet, and FTP services if not required.
  • Ensure that the device is not connected to untrusted networks.
  • Regularly monitor the device for irregularities or unauthorized activity.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →
Similar Tools
critical
Social Warfare Remote Code Execution Scanner
→critical
CVE-2022-0826 Scanner
→critical
CVE-2020-25506 Scanner
→critical
CVE-2018-7602 Scanner
→critical
CVE-2022-38637 Scanner
→critical
CVE-2014-1203 Scanner
→high
CVE-2023-33440 Scanner
→high
CVE-2023-33439 Scanner
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.