Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
13 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.80% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could lead an attacker to get… | |
| Modificada | Media (6.5) | 0.83% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker connected to the… | |
| Modificada | Crítica (9.8) | 1.4% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could an attacker to gain unauthorized… | |
| Modificada | Crítica (9.8) | 1.8% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain… | |
| Modificada | Media (6.5) | 1.1% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could cause disclosure of encrypted credentials… | |
| Modificada | Crítica (9.8) | 1.4% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized… | |
| Modificada | Alta (8.1) | 1.00% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to perform… | |
| Modificada | Media (6.1) | 0.75% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart… | |
| Modificada | Media (5.4) | 0.48% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior… | |
| Modificada | Media (5.3) | 0.95% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to get limited knowledge… | |
| Modificada | Alta (7.2) | 0.65% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an… | |
| Modificada | Crítica (9.8) | 65% | 💥 Exploit | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue… | |
| Modificada | Media (6.1) | 0.76% | — | Schneider-electric Evlink City Evc1s22p4 FirmwareSchneider-electric Evlink City Evc1s7p4 FirmwareSchneider-electric Evlink Parking Evw2 FirmwareSchneider-electric Evlink Parking Evf2 Firmware+2 | 21/7/2021 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8… |