Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:evlink_wallbox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductEvlink Wallbox (22a628da-7a48-56a0-bc0f-348f759046ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5743 vulnerable 2026-06-08 07:37:25.639825 Details available
MEDIUM (5.5)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server.
Published: 2025-06-10T08:15:42.268Z
Updated: 2025-10-07T03:29:00.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5742 vulnerable 2026-06-08 07:37:25.639519 Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on the web server
Published: 2025-06-10T08:11:55.330Z
Updated: 2025-06-10T13:08:22.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5741 vulnerable 2026-06-08 07:37:25.639191 Details available
MEDIUM (4.9)
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server.
Published: 2025-06-10T08:09:21.392Z
Updated: 2025-06-10T13:08:45.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5740 vulnerable 2026-06-08 07:37:25.638790 Details available
HIGH (7.2)
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path.
Published: 2025-06-10T08:06:49.986Z
Updated: 2025-10-07T03:27:41.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.