CVE-2021-22726

🗓️ 21 Jul 2021 10:43:16Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 48 Views

CVE-2021-22726: SSRF vulnerability in EVlink City, Parking, and Smart Wallbo

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox, which exist due to SSRF requests being forged on the server side, allow a remote intruder to perform unintended actions or gain unauthorized access to protected information.	22 May 202300:00	–	bdu_fstec
Circl	CVE-2021-22726	21 Jul 202118:48	–	circl
CNNVD	EVlink City、EVlink Parking 和 EVlink Smart Wallbox 代码问题漏洞	21 Jul 202100:00	–	cnnvd
CNVD	EVlink City, EVlink Parking, EVlink Smart Wallbox code issue vulnerability	26 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-22726	21 Jul 202110:43	–	cvelist
EUVD	EUVD-2021-9861	3 Oct 202520:07	–	euvd
NVD	CVE-2021-22726	21 Jul 202115:15	–	nvd
OSV	CVE-2021-22726	21 Jul 202115:15	–	osv
Prion	Server side request forgery (ssrf)	21 Jul 202115:15	–	prion
RedhatCVE	CVE-2021-22726	22 May 202520:47	–	redhatcve

NVD

Node

schneider-electric evlink_city_evc1s22p4_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_city_evc1s22p4Match-

Node

schneider-electric evlink_city_evc1s7p4_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_city_evc1s7p4Match-

Node

schneider-electric evlink_parking_evw2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_evw2Match-

Node

schneider-electric evlink_parking_evf2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_evf2Match-

Node

schneider-electric evlink_parking_ev.2_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_parking_ev.2Match-

Node

schneider-electric evlink_smart_wallbox_evb1a_firmwareRange<r8_v3.4.0.1

AND

schneider-electric evlink_smart_wallbox_evb1aMatch-

[
  {
    "product": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

17 Jun 2026 03:37Current

8High risk

Vulners AI Score8

CVSS 25.5

CVSS 3.18.1

EPSS0.00997

CWE-918