Skip to content

Schneider-electric Evf2 Firmware vulnerabilities

schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-79 Improper Neutralization of Input During Web Page Generation (?Cross-site Scripting?)...CVE-2021-228226.1 MediumJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station...CVE-2021-228218.6 HighJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to...CVE-2021-228209.8 CriticalJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...CVE-2021-228194.3 MediumJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2021-228187.5 HighJanuary 28, 2022
schneider-electric evb1a firmware, evc1s22p4 firmware, evc1s7p4 firmware +3 more +5 moreA CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to...CVE-2021-227258.8 HighJanuary 28, 2022
schneider-electric evb1a firmware, evc1s22p4 firmware, evc1s7p4 firmware +3 more +5 moreA CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to...CVE-2021-227248.8 HighJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-227747.5 HighJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...CVE-2021-227736.5 MediumJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-227309.8 CriticalJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...CVE-2021-227299.8 CriticalJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...CVE-2021-227286.5 MediumJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...CVE-2021-227279.8 CriticalJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-227268.1 HighJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting)...CVE-2021-227236.1 MediumJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site...CVE-2021-227225.4 MediumJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...CVE-2021-227215.3 MediumJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City ...CVE-2021-227087.2 HighJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...CVE-2021-22707EPSS 64.6%9.8 CriticalJuly 21, 2021
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-227066.1 MediumJuly 21, 2021