Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22701 State: PUBLISHED Published: 2021-02-19T15:15:16 Last Updated: 2024-08-03T18:51:07.099Z Vendors: n/a Products: PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) Problem Types: CWE-352 Description: A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/downlo
the HTTP web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-040-01/
CVE ID: CVE-2021-22702 State: PUBLISHED Published: 2021-02-19T15:13:31 Last Updated: 2024-08-03T18:51:07.456Z Vendors: n/a Products: PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) Problem Types: CWE-319 Description: A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet network traffic between a user and the device. Additional Analyst Note
dentials when a malicious actor intercepts Telnet network traffic between a user and the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-040-01/
CVE ID: CVE-2021-22703 State: PUBLISHED Published: 2021-02-19T15:14:25 Last Updated: 2024-08-03T18:51:07.062Z Vendors: n/a Products: PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) Problem Types: CWE-319 Description: A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic between a user and the device. Additional Analyst Notes: - CVE Program Container: Re
tor intercepts HTTP network traffic between a user and the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-040-01/
CVE ID: CVE-2021-22704 State: PUBLISHED Published: 2021-09-02T16:53:31 Last Updated: 2024-08-03T18:51:07.445Z Vendors: n/a Products: Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauth
rior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) that could cause a Denial of Service or unauthorized access to system information when connecting to the Harmony HMI over FTP. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-01
CVE ID: CVE-2021-22705 State: PUBLISHED Published: 2021-05-26T19:19:18 Last Updated: 2024-08-03T18:51:07.333Z Vendors: n/a Products: Harmony HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ) or EcoStruxure Machine Expert (all versions prior to V2.0) Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc
ert Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-02
CVE ID: CVE-2021-22706 State: PUBLISHED Published: 2021-07-21T10:41:41 Last Updated: 2024-08-03T18:51:07.071Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0
(EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the charging station web server. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22707 State: PUBLISHED Published: 2021-07-21T10:41:47 Last Updated: 2024-08-03T18:51:07.070Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthoriz
1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22708 State: PUBLISHED Published: 2021-07-21T10:41:53 Last Updated: 2024-08-03T18:51:07.103Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-347 Description: A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker
prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to craft a malicious firmware package and bypass the signature verification mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22709 State: PUBLISHED Published: 2021-03-11T20:27:13 Last Updated: 2024-08-03T18:51:07.101Z Vendors: n/a Products: Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior Problem Types: CWE-119 Description: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in loss of data or remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document
Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-01 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01
CVE ID: CVE-2021-22710 State: PUBLISHED Published: 2021-03-11T20:26:02 Last Updated: 2024-08-03T18:51:07.145Z Vendors: n/a Products: Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior Problem Types: CWE-119 Description: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could cause remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-01 -
nal Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-01 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01
CVE ID: CVE-2021-22711 State: PUBLISHED Published: 2021-03-11T20:23:16 Last Updated: 2024-08-03T18:51:07.081Z Vendors: n/a Products: Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior Problem Types: CWE-119 Description: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to missing validation of input data. Additional Analyst Notes: - CVE Program Container: References: - https
finition due to missing validation of input data. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-01 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01
CVE ID: CVE-2021-22712 State: PUBLISHED Published: 2021-03-11T20:25:07 Last Updated: 2024-08-03T18:51:07.130Z Vendors: n/a Products: Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior Problem Types: CWE-119 Description: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to an unchecked pointer address. Additional Analyst Notes: - CVE Program Container: References: - https://w
finition due to an unchecked pointer address. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-01 - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01
CVE ID: CVE-2021-22713 State: PUBLISHED Published: 2021-03-11T20:15:27 Last Updated: 2024-08-03T18:51:07.027Z Vendors: n/a Products: PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions) Problem Types: CWE-119 Description: A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-03
CVE ID: CVE-2021-22714 State: PUBLISHED Published: 2021-03-11T20:13:56 Last Updated: 2024-08-03T18:51:06.841Z Vendors: n/a Products: PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0) Problem Types: CWE-119 Description: A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2021-068-02
CVE ID: CVE-2021-22716 State: PUBLISHED Published: 2021-04-13T18:31:18.018125Z Last Updated: 2024-09-16T22:02:57.408Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: C-Bus Toolkit Problem Types: CWE-732 Description: A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit (V1.15.9 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-103-
chneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-103-01_C-Bus_Toolkit_C-Gate_Server_Security_Notification.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-105-01
CVE ID: CVE-2021-22717 State: PUBLISHED Published: 2021-04-13T18:31:31 Last Updated: 2024-08-03T18:51:07.433Z Vendors: n/a Products: C-Bus Toolkit V1.15.7 and prior Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-447/
CVE ID: CVE-2021-22718 State: PUBLISHED Published: 2021-04-13T18:31:49 Last Updated: 2024-08-03T18:51:07.512Z Vendors: n/a Products: C-Bus Toolkit V1.15.7 and prior Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-448/
CVE ID: CVE-2021-22719 State: PUBLISHED Published: 2021-04-13T18:32:12 Last Updated: 2024-08-03T18:51:07.234Z Vendors: n/a Products: C-Bus Toolkit V1.15.7 and prior Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-449/
CVE ID: CVE-2021-22720 State: PUBLISHED Published: 2021-04-13T18:32:29 Last Updated: 2024-08-03T18:51:07.099Z Vendors: n/a Products: C-Bus Toolkit V1.15.7 and prior Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-450/ - https://www.tenable.com/security/research/tra-2021-50
CVE ID: CVE-2021-22721 State: PUBLISHED Published: 2021-07-21T10:41:59 Last Updated: 2024-08-03T18:51:07.020Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to get limited knowledge of
Vlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to get limited knowledge of javascript code when crafted malicious parameters are submitted to the charging station web server. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22722 State: PUBLISHED Published: 2021-07-21T10:43:03 Last Updated: 2024-08-03T18:51:07.153Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8
Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause code injection when importing a CSV file or changing station parameters. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22723 State: PUBLISHED Published: 2021-07-21T10:43:10 Last Updated: 2024-08-03T18:51:07.018Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox
s prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the charging station web server. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22724 State: PUBLISHED Published: 2022-01-28T19:09:33 Last Updated: 2024-08-03T18:51:07.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program
8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
CVE ID: CVE-2021-22725 State: PUBLISHED Published: 2022-01-28T19:09:34 Last Updated: 2024-08-03T18:51:07.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2) Additional Analyst Notes: - CVE Program
CVE ID: CVE-2021-22726 State: PUBLISHED Published: 2021-07-21T10:43:16 Last Updated: 2024-08-03T18:51:07.432Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-918 Description: A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to perform uni
.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to perform unintended actions or access to data when crafted malicious parameters are submitted to the charging station web server. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22727 State: PUBLISHED Published: 2021-07-21T10:43:27 Last Updated: 2024-08-03T18:51:07.027Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-331 Description: A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized access
Vlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized access to the charging station web server Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22728 State: PUBLISHED Published: 2021-07-21T10:43:34 Last Updated: 2024-08-03T18:51:07.256Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause disclosure of encrypted credentials when
Vlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause disclosure of encrypted credentials when consulting the maintenance report. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06