CVE-2021-22728: Infoleak
A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause disclosure of encrypted credentials when consulting the maintenance report.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22728?
CVE-2021-22728 is an Information Exposure vulnerability in Schneider-electric EVlink City, EVlink Parking, and EVlink Smart Wallbox.
Which software versions are affected by CVE-2021-22728?
CVE-2021-22728 affects EVlink City (EVC1S22P4 / EVC1S7P4) firmware versions prior to R8 V3.4.0.1, EVlink Parking (EVW2 / EVF2 / EV.2) firmware versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox (EVB1A) firmware versions prior to R8 V3.4.0.1.
What is the severity of CVE-2021-22728?
The severity of CVE-2021-22728 is medium with a CVSS score of 6.5.
How does CVE-2021-22728 cause information exposure?
CVE-2021-22728 allows an attacker to disclose encrypted data, leading to information exposure.
Is there a fix available for CVE-2021-22728?
Yes, the fix for CVE-2021-22728 is to upgrade the affected software versions to R8 V3.4.0.1 or later.