Lucene search

K
cvelistSchneiderCVELIST:CVE-2021-22730
HistoryJul 21, 2021 - 10:44 a.m.

CVE-2021-22730

2021-07-2110:44:55
CWE-798
schneider
www.cve.org
8
cwe-798
hard-coded credentials
evlink city
evlink parking
evlink smart wallbox
unauthorized access

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

60.7%

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could an attacker to gain unauthorized administrative privileges when accessing to the charging station web server.

CNA Affected

[
  {
    "product": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )"
      }
    ]
  }
]

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

60.7%

Related for CVELIST:CVE-2021-22730