Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Evlink_parking_ev\.2_firmware
(Schneider\-Electric)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 13 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-07-21 | CVE-2021-22706 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are... | Evlink_city_evc1s22p4_firmware, Evlink_city_evc1s7p4_firmware, Evlink_parking_ev\.2_firmware, Evlink_parking_evf2_firmware, Evlink_parking_evw2_firmware, Evlink_smart_wallbox_evb1a_firmware | 6.1 | ||
| 2021-07-21 | CVE-2021-22707 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges. | Evlink_city_evc1s22p4_firmware, Evlink_city_evc1s7p4_firmware, Evlink_parking_ev\.2_firmware, Evlink_parking_evf2_firmware, Evlink_parking_evw2_firmware, Evlink_smart_wallbox_evb1a_firmware | 9.8 | ||
| 2021-07-21 | CVE-2021-22708 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to craft a malicious firmware package and bypass the signature verification mechanism. | Evlink_city_evc1s22p4_firmware, Evlink_city_evc1s7p4_firmware, Evlink_parking_ev\.2_firmware, Evlink_parking_evf2_firmware, Evlink_parking_evw2_firmware, Evlink_smart_wallbox_evb1a_firmware | 7.2 |