Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability exists that could cause remote control over the charging station when an authenticated user
modifies configuration parameters on the web server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EVLink WallBox | All Versions | — |
Advisories 2
- ICSA-25-175-04 Schneider Electric EVLink WallBox (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-161-03 EVLink WallBox Schneider Electric CPCERT · Jul 8, 2025