Schneider Electric Evlink Parking ev.2 Firmware vulnerabilities

13 CVEs affecting Schneider Electric Evlink Parking ev.2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22774, published 2021-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22707, published 2021-07-21. Critical severity, CVSS 9.8. EPSS: 64.6% chance of exploitation in the next 30 days. A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8…
CVE-2021-22729, published 2021-07-21. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8…
CVE-2021-22727, published 2021-07-21. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1),…
CVE-2021-22730, published 2021-07-21. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8…
CVE-2021-22728, published 2021-07-21. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1),…
CVE-2021-22726, published 2021-07-21. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8…
CVE-2021-22721, published 2021-07-21. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1),…
CVE-2021-22773, published 2021-07-21. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8…
CVE-2021-22774, published 2021-07-21. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to…
CVE-2021-22706, published 2021-07-21. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink…

Latest

CVE-2021-22723, published 2021-07-21. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all…
CVE-2021-22722, published 2021-07-21. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1),…