Read the docs

Schneider Electric

Records889All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical178CVSS 9.0–10.0
CVSS high452CVSS 7.0–8.9

Exploited now

Schneider Electric records in CISA KEV
TI-2018-05679 Schneider Electric U.motion Builder SQL Injection Vulnerability Priority CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records
Struxureware Data Center Expert 49 records MEDIUM Interactive Graphical Scada System 43 records MEDIUM Modicon M580 Firmware 41 records HIGH Modicon M340 Firmware 39 records HIGH Modicon M340 Bmxp342020 Firmware 32 records MEDIUM Modicon M340 Bmxp3420302 Firmware 28 records MEDIUM Modicon M340 Bmxp341000 Firmware 27 records MEDIUM Ecostruxure Control Expert 26 records MEDIUM

Records

18 records in Evlink City Evc1s22p4 Firmware · all components

TI-2021-05589 CVE-2021-22707 · GHSA-588r-rc4p-m49f

Hard-coded credentials in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority HIGH 78

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Sma…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.64612 Published 2021-07-21 No fix listed CWE-798
TI-2021-05610 CVE-2021-22729 · GHSA-prqg-qgv5-mrj8

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 /…

Priority MEDIUM 46

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01794 Published 2021-07-21 No fix listed CWE-259
TI-2021-05611 CVE-2021-22730 · GHSA-52wm-c4pm-697g

Hard-coded credentials in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority MEDIUM 45

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Sma…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01396 Published 2021-07-21 No fix listed CWE-798
TI-2021-05608 CVE-2021-22727 · GHSA-cv48-2frc-94w5

A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4…

Priority MEDIUM 45

A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01404 Published 2021-07-21 No fix listed CWE-331
TI-2021-05700 CVE-2021-22820 · GHSA-2c5p-55qj-5p58

A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an…

Priority MEDIUM 44

A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web server even after the legitimate user acco…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01084 Published 2022-01-28 No fix listed CWE-613
TI-2021-05607 CVE-2021-22726 · GHSA-grmv-v3vj-2xjq

Server-side request forgery in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 37

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlin…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00997 Published 2021-07-21 No fix listed CWE-918
TI-2021-05655 CVE-2021-22774 · GHSA-9qf8-xp27-gqw2

A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City…

Priority LOW 34

A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVl…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00799 Published 2021-07-21 No fix listed CWE-916
TI-2021-05590 CVE-2021-22708 · GHSA-2wrx-q5xx-wffm

Improper signature verification in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 33

A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00652 Published 2021-07-21 No fix listed CWE-347
TI-2021-05609 CVE-2021-22728 · GHSA-jccw-mf72-45fw

Information disclosure in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 31

A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbo…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01072 Published 2021-07-21 No fix listed CWE-200
TI-2021-05654 CVE-2021-22773 · GHSA-8pg2-f5fh-mj6f

A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 /…

Priority LOW 30

A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00833 Published 2021-07-21 No fix listed CWE-620
TI-2021-05604 CVE-2021-22723 · GHSA-2qqj-33q9-mw4m

Cross-site scripting in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 29

A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00751 Published 2021-07-21 No fix listed CWE-79
TI-2021-05588 CVE-2021-22706 · GHSA-cwj4-vhgq-c4jr

Cross-site scripting in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 29

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / E…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00754 Published 2021-07-21 No fix listed CWE-79
TI-2021-05702 CVE-2021-22822 · GHSA-qm5p-m3pg-gj6g

A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site…

Priority LOW 28

A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages the charging station or carry out action…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00562 Published 2022-01-28 No fix listed CWE-79
TI-2021-05602 CVE-2021-22721 · GHSA-68w7-v8mp-33m7

Information disclosure in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 26

A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00951 Published 2021-07-21 No fix listed CWE-200
TI-2021-05603 CVE-2021-22722 · GHSA-f8f4-fw78-3659

Cross-site scripting in EVlink City , EVlink Parking , and EVlink Smart Wallbox

Priority LOW 25

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / E…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00474 Published 2021-07-21 No fix listed CWE-79
TI-2021-05699 CVE-2021-22819 · GHSA-27h5-6x4r-4343

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that…

Priority LOW 21

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface ren…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00651 Published 2022-01-28 No fix listed CWE-1021
Open these records in search →