CVE-2022-34753

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Homer Controller MK2 (V1.31.460 and prior)

• CWE-78

• http://packetstormsecurity.com/files/167783/Schneider-Electric-SpaceLogic-C-Bus-Home-Controller-5200WHC2-Remote-Root.htmlExploit, Third Party Advisory
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-02_SpaceLogic-C-Bus-Home-Controller-Wiser_MK2_Security_Notification.pdfPatch, Vendor Advisory
• http://packetstormsecurity.com/files/167783/Schneider-Electric-SpaceLogic-C-Bus-Home-Controller-5200WHC2-Remote-Root.htmlExploit, Third Party Advisory
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-02_SpaceLogic-C-Bus-Home-Controller-Wiser_MK2_Security_Notification.pdfPatch, Vendor Advisory

Published

Jul 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34743The AT commands of the USB port have an out-of-bounds read v…7.5
• CVE-2022-34746An insufficient entropy vulnerability caused by the improper…5.9
• CVE-2022-34747A format string vulnerability in Zyxel NAS326 firmware versi…9.8
• CVE-2022-34748A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2022-34749In mistune through 2.0.2, support of inline markup is implem…7.5
• CVE-2022-34750An issue was discovered in MediaWiki through 1.38.1. The lem…7.5
• CVE-2022-34754A CWE-269: Improper Privilege Management vulnerability exist…6.8
• CVE-2022-34755 A CWE-427 - Uncontrolled Search Path Element vulnerability …6.7
• CVE-2022-34756A CWE-120: Buffer Copy without Checking Size of Input vulner…9.8
• CVE-2022-34757A CWE-327: Use of a Broken or Risky Cryptographic Algorithm …5.3
• CVE-2022-34758A CWE-20: Improper Input Validation vulnerability exists tha…4.9
• CVE-2022-34759A CWE-787: Out-of-bounds Write vulnerability exists that cou…7.5