CVE-2021-22822

🗓️ 28 Jan 2022 20:15:10Reported by [email protected]Type

A Cross-site Scripting vulnerability in charging station web servers may allow impersonation and unauthorized actions by submitting malicious parameters. Affected products: EVlink City EVC1S22P4 / EVC1S7P4, EVlink Parking EVW2 / EVF2 / EVP2PE, and EVlink Smart Wallbox EVB1A

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	Vulnerability of EVlink City’s parking charging station software. EVlink Parking and EVlink Smart Wallbox are vulnerable due to the lack of measures taken to protect the website structure, allowing attackers to impersonate users who control the charging stations or carry out actions on their behalf.	29 May 202300:00	–	bdu_fstec
Circl	CVE-2021-22822	10 Dec 202316:36	–	circl
CNNVD	多款Schneider Electric产品跨站脚本漏洞	28 Jan 202200:00	–	cnnvd
CVE	CVE-2021-22822	28 Jan 202219:09	–	cve
Cvelist	CVE-2021-22822	28 Jan 202219:09	–	cvelist
EUVD	EUVD-2021-9957	3 Oct 202520:07	–	euvd
Prion	Cross site scripting	28 Jan 202220:15	–	prion
Positive Technologies	PT-2021-7786 · Schneider Electric · Evlink Parking Evf2 +4	14 Dec 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-22822	9 Jan 202611:21	–	redhatcve