Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

schneider-electric / evlink_parking_evf2 CVEs

Beta · best-effort

18 CVEs tagged to schneider-electric / evlink_parking_evf2 — 5 Critical, 5 High, 8 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to schneider-electric vendor archive

CVE-2021-22822

Published Jan 28, 2022

A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22821

Published Jan 28, 2022

A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

CVE-2021-22820

Published Jan 28, 2022

A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web s…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-22819

Published Jan 28, 2022

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiv…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22818

Published Jan 28, 2022

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web inter…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-22774

Published Jul 21, 2021

A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 al…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-22773

Published Jul 21, 2021

A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22730

Published Jul 21, 2021

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versi…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-22729

Published Jul 21, 2021

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-22728

Published Jul 21, 2021

A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22727

Published Jul 21, 2021

A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-22726

Published Jul 21, 2021

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2021-22723

Published Jul 21, 2021

A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22722

Published Jul 21, 2021

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22721

Published Jul 21, 2021

A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-22708

Published Jul 21, 2021

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EV…

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

CVE-2021-22707

Published Jul 21, 2021

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versi…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-22706

Published Jul 21, 2021

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-18 of 18 CVEsPage 1 of 1