Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that
could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an
authenticated session of the web server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EVLink WallBox | All Versions | — |
Advisories 2
- ICSA-25-175-04 Schneider Electric EVLink WallBox (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-161-03 EVLink WallBox Schneider Electric CPCERT · Jul 8, 2025