Design/Logic Flaw

2018-07-0314:29:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users.

CPENameOperatorVersion
evlink_charging_station_firmwareeq< 3.2.012v1

CPE	Name	Operator	Version
	evlink_charging_station_firmware	eq	< 3.2.012v1

References

www.schneider-electric.com/en/download/document/SEVD-2018-109-01/