Evlink City Evc1s22p4 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Evlink City Evc1s22p4 Firmware

by Schneider-electric · last CVE Jan 28, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 5High 5Medium 8Low 0

Severity

All severities18 Critical5 High5 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Evlink City Evc1s22p4 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-22773	6.5	1%	Jul 21	A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions… Affected: before r8_v3.4.0.1
CVE-2021-22728	6.5	1%	Jul 21	A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior… Affected: before r8_v3.4.0.1
CVE-2021-22822	6.1	1%	Jan 28	A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages… Affected: before 3.4.0.2
CVE-2021-22723	6.1	1%	Jul 21	A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City… Affected: before r8_v3.4.0.1
CVE-2021-22706	6.1	1%	Jul 21	A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8… Affected: before r8_v3.4.0.1
CVE-2021-22722	5.4	0%	Jul 21	A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior… Affected: before r8_v3.4.0.1
CVE-2021-22721	5.3	1%	Jul 21	A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior… Affected: before r8_v3.4.0.1
CVE-2021-22819	4.3	1%	Jan 28	A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when… Affected: before 3.4.0.2