EP
Product
Evlink Parking Evp2pe Firmware
by Schneider-electric · last CVE Jan 28, 2022
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch

Add Evlink Parking Evp2pe Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-22820
9.8
1%
Jan 28
A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web…
Affected: before 3.4.0.2
CVE-2021-22821
8.6
1%
Jan 28
A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious…
Affected: before 3.4.0.2
CVE-2021-22818
7.5
1%
Jan 28
A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web…
Affected: before 3.4.0.2
CVE-2021-22822
6.1
1%
Jan 28
A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages…
Affected: before 3.4.0.2
CVE-2021-22819
4.3
1%
Jan 28
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when…
Affected: before 3.4.0.2
Showing 5