Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EVLink WallBox | All Versions | — |
Advisories 2
- ICSA-25-175-04 Schneider Electric EVLink WallBox (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-161-03 EVLink WallBox Schneider Electric CPCERT · Jul 8, 2025