Description
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
vulnerability exists when an authenticated user modifies configuration parameters on the web server
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EVLink WallBox | All Versions | — |
Advisories 2
- ICSA-25-175-04 Schneider Electric EVLink WallBox (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-161-03 EVLink WallBox Schneider Electric CPCERT · Jul 8, 2025