Unscored CVE-2018-7801 EUVD-2018-19513GHSA-xcm9-pjj3-347q

A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maximum privileges when a…

Published Dec 24, 2018 · Updated Aug 5, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: EVLink Parking v3.2.0-12_v1 and earlier Category: ICS / OT

Description

A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed.

Affected products

Vendor	Product	Affected	Fixed
Schneider Electric SE	EVLink Parking v3.2.0-12_v1 and earlier	EVLink Parking v3.2.0-12_v1 and earlier	—

Advisories 1

ICSA-19-031-01 Schneider Electric EVLink Parking CISA ICS & IT advisories · Jan 31, 2019

References

https://www.schneider-electric.com/en/download/document/SEVD-2018-354-01/
106807 vdb-entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-031-01
20210714 SEC Consult SA-20210714-0 :: Critical vulnerabilities in Schneider Electric EVlink Charging Stations mailing-list