CVE-2021-22708

🗓️ 21 Jul 2021 10:41:53Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 82 Views

CVE-2021-22708 CWE-347 in EVlink City, Parking, and Smart Wallbox allows malicious firmware package to bypass signature verification

Reporter	Title	Published	Views	Family All 9
0day.today	Schneider Electric EVlink Charging Stations Authentication Bypass / Code Execution Vulnerabilities	16 Jul 202100:00	–	zdt
Circl	CVE-2021-22708	21 Jul 202118:48	–	circl
CNNVD	Multiple Schneider Electric EVlink Charging Stations 数据伪造问题漏洞	14 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-22708	21 Jul 202110:41	–	cvelist
EUVD	EUVD-2021-9843	3 Oct 202520:07	–	euvd
NVD	CVE-2021-22708	21 Jul 202115:15	–	nvd
Packet Storm	Schneider Electric EVlink Charging Stations Authentication Bypass / Code Execution	14 Jul 202100:00	–	packetstorm
Prion	Information disclosure	21 Jul 202115:15	–	prion
RedhatCVE	CVE-2021-22708	22 May 202518:32	–	redhatcve

NVD

Node

schneider-electric evlink_city_evc1s22p4_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_city_evc1s22p4Match-

Node

schneider-electric evlink_city_evc1s7p4_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_city_evc1s7p4Match-

Node

schneider-electric evlink_parking_evw2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_evw2Match-

Node

schneider-electric evlink_parking_evf2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_evf2Match-

Node

schneider-electric evlink_parking_ev.2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_ev.2Match-

Node

schneider-electric evlink_smart_wallbox_evb1a_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_smart_wallbox_evb1aMatch-

[
  {
    "product": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 05:50Current

7.4High risk

Vulners AI Score7.4

CVSS 26.5

CVSS 3.17.2

EPSS0.00245

CWE-347