Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:evlink_smart_wallbox_evb1a_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductEvlink Smart Wallbox Evb1A Firmware (e6e731e0-6cb6-5190-b423-659b65b6f5ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22822 vulnerable 2026-06-08 05:30:01.619829 Details available
A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Published: 2022-01-28T19:09:38.000Z
Updated: 2024-08-03T18:51:07.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22821 vulnerable 2026-06-08 05:30:01.618901 Details available
A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious parameters are submitted to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Published: 2022-01-28T19:09:37.000Z
Updated: 2024-08-03T18:51:07.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22820 vulnerable 2026-06-08 05:30:01.618179 Details available
A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web server even after the legitimate user account holder has changed his password. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Published: 2022-01-28T19:09:36.000Z
Updated: 2024-08-03T18:51:07.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22819 vulnerable 2026-06-08 05:30:01.617557 Details available
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Published: 2022-01-28T19:09:35.000Z
Updated: 2024-08-03T18:51:07.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22818 vulnerable 2026-06-08 05:30:01.616845 Details available
A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web interface by performing brute force attacks. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
Published: 2022-01-28T19:09:35.000Z
Updated: 2024-08-03T18:51:07.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22774 vulnerable 2026-06-08 05:30:01.288464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22773 vulnerable 2026-06-08 05:30:01.287646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22730 vulnerable 2026-06-08 05:30:01.182011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22729 vulnerable 2026-06-08 05:30:01.181357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22728 vulnerable 2026-06-08 05:30:01.180587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22727 vulnerable 2026-06-08 05:30:01.179867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22726 vulnerable 2026-06-08 05:30:01.179137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22723 vulnerable 2026-06-08 05:30:01.163893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22722 vulnerable 2026-06-08 05:30:01.162856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22721 vulnerable 2026-06-08 05:30:01.162239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22708 vulnerable 2026-06-08 05:30:01.142481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22707 vulnerable 2026-06-08 05:30:01.141763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22706 vulnerable 2026-06-08 05:30:01.140574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.