EP
Product
Evlink Parking Evf2 Firmware
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 8Low 0
Watch
Add Evlink Parking Evf2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22820 | 9.8 | Jan 28 | A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web… Affected: before 3.4.0.2 |
| CVE-2021-22730 | 9.8 | Jul 21 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all… Affected: before r8_v3.4.0.1 |
| CVE-2021-22729 | 9.8 | Jul 21 | A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions… Affected: before r8_v3.4.0.1 |
| CVE-2021-22727 | 9.8 | Jul 21 | A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior… Affected: before r8_v3.4.0.1 |
| CVE-2021-22707 | 9.8 | Jul 21 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all… Affected: before r8_v3.4.0.1 |
| CVE-2021-22821 | 8.6 | Jan 28 | A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious… Affected: before 3.4.0.2 |
| CVE-2021-22726 | 8.1 | Jul 21 | A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all… Affected: before r8_v3.4.0.1 |
| CVE-2021-22818 | 7.5 | Jan 28 | A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web… Affected: before 3.4.0.2 |
| CVE-2021-22774 | 7.5 | Jul 21 | A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2… Affected: before r8_v3.4.0.1 |
| CVE-2021-22708 | 7.2 | Jul 21 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 /… Affected: before r8_v3.4.0.1 |
| CVE-2021-22773 | 6.5 | Jul 21 | A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions… Affected: before r8_v3.4.0.1 |
| CVE-2021-22728 | 6.5 | Jul 21 | A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior… Affected: before r8_v3.4.0.1 |
| CVE-2021-22822 | 6.1 | Jan 28 | A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages… Affected: before 3.4.0.2 |
| CVE-2021-22723 | 6.1 | Jul 21 | A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City… Affected: before r8_v3.4.0.1 |
| CVE-2021-22706 | 6.1 | Jul 21 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8… Affected: before r8_v3.4.0.1 |
| CVE-2021-22722 | 5.4 | Jul 21 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior… Affected: before r8_v3.4.0.1 |
| CVE-2021-22721 | 5.3 | Jul 21 | A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior… Affected: before r8_v3.4.0.1 |
| CVE-2021-22819 | 4.3 | Jan 28 | A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when… Affected: before 3.4.0.2 |
Showing 18