CVE-2021-22723

🗓️ 21 Jul 2021 10:43:10Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 47 Views

CVE-2021-22723 allows CSRF attacks via XSS in multiple EVlink versions prior to R8 V3.4.0.1.

Reporter	Title	Published	Views	Family All 7
CNNVD	EVlink City、EVlink Parking 跨站脚本漏洞	21 Jul 202100:00	–	cnnvd
CNVD	EVlink City, EVlink Parking, EVlink Smart Wallbox Cross-Site Scripting Vulnerability (CNVD-2021-62162)	26 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-22723	21 Jul 202110:43	–	cvelist
EUVD	EUVD-2021-9858	3 Oct 202520:07	–	euvd
NVD	CVE-2021-22723	21 Jul 202115:15	–	nvd
Prion	Cross site request forgery (csrf)	21 Jul 202115:15	–	prion
RedhatCVE	CVE-2021-22723	9 Jan 202611:22	–	redhatcve

NVD

Node

schneider-electric evlink_city_evc1s22p4_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_city_evc1s22p4Match-

Node

schneider-electric evlink_city_evc1s7p4_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_city_evc1s7p4Match-

Node

schneider-electric evlink_parking_evw2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_evw2Match-

Node

schneider-electric evlink_parking_evf2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_evf2Match-

Node

schneider-electric evlink_parking_ev.2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_ev.2Match-

Node

schneider-electric evlink_smart_wallbox_evb1a_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_smart_wallbox_evb1aMatch-

[
  {
    "product": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 05:50Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

CVSS 3.16.1

EPSS0.00317

CWE-79