Description
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test
credentials in the firmware binary
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EVlink Home Smart | All versions prior to 2.0.6.0.0 | — |
| Schneider Electric | Schneider Charge | All versions prior to 1.13.4 | — |
Advisories 2
- ICSA-25-023-03 Schneider Electric EVlink Home Smart and Schneider Charge CISA ICS & IT advisories · Oct 8, 2024
- SEVD-2024-282-04 EVlink Home Smart and Schneider Charge Schneider Electric CPCERT · Oct 8, 2024