CVE:CVE-2022-22811
CNNVD:CNNVD-202202-901
Schneider Electric spaceLYnk是法国施耐德电气（Schneider Electric）公司的一款可编程逻辑控制器。
spaceLYnk存在跨站请求伪造漏洞，该漏洞源于存在一个CWE-352:跨站点请求伪造(CSRF)漏洞，该漏洞可能会诱使用户执行意想不到的操作，导致系统被覆盖。
solution:Upgrade schneider-electric spacelynk_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2]; Upgrade schneider-electric wiser_for_knx_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2]; Upgrade schneider-electric fellerlynk_firmware to a higher version than 2.6.2,and avoid the version (,2.6.2]