CVE-2021-22726: SSRF
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to perform unintended actions or access to data when crafted malicious parameters are submitted to the charging station web server.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22726?
CVE-2021-22726 is a Server-Side Request Forgery (SSRF) vulnerability in Schneider-electric EVlink City, EVlink Parking, and EVlink Smart Wallbox.
How severe is CVE-2021-22726?
CVE-2021-22726 has a severity rating of 8.1 (high).
Which software versions are affected by CVE-2021-22726?
Versions of EVlink City prior to R8 V3.4.0.1, EVlink Parking prior to R8 V3.4.0.1, and EVlink Smart Wallbox prior to R8 V3.4.0.1 are affected.
What is the CWE ID for CVE-2021-22726?
CVE-2021-22726 is associated with CWE-918.
How can I fix CVE-2021-22726?
To fix CVE-2021-22726, update your Schneider-electric EVlink City, EVlink Parking, and EVlink Smart Wallbox to version R8 V3.4.0.1 or later.