Schneider Electric Evlink Parking Firmware vulnerabilities

3 CVEs affecting Schneider Electric Evlink Parking Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7802, published 2018-12-24.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7801, published 2018-12-24. High severity, CVSS 8.8. EPSS: 6.3% chance of exploitation in the next 30 days. A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed.
• CVE-2018-7800, published 2018-12-24. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacker to gain access to the device.
• CVE-2018-7802, published 2018-12-24. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web interface with full privileges.