Evlink Parking Evp2pe Firmware (Schneider-electric) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-01-28. Vendor: Schneider-electric.

CVEs of Evlink Parking Evp2pe Firmware

• CVE-2021-22821 - CVSS 8.6 (high), 2022-01-28: A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets…
• CVE-2021-22820 - CVSS 9.8 (critical), 2022-01-28: A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the…
• CVE-2021-22819 - CVSS 4.3 (medium), 2022-01-28: A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user…
• CVE-2021-22822 - CVSS 6.1 (medium), 2022-01-28: A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate…
• CVE-2021-22818 - CVSS 7.5 (high), 2022-01-28: A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the…