Schneider Electric Evlink Parking Vulnerabilidad

Cronología

Versión

Contramedidas

Official Fix22
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined22

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent14
Network8

Autenticación

Not Defined0
High0
Low16
None6

La interacción del usuario

Not Defined0
Required8
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤410
≤54
≤64
≤72
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤410
≤54
≤66
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤32
≤410
≤54
≤64
≤72
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k12
<2k10
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k22
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Link to Product Website: https://www.schneider-electric.com/

Tipo de software: SCADA Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2022-01-293.73.6Schneider Electric EVlink City EVC1S22P4 autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22820
2022-01-295.55.3Schneider Electric EVlink City EVC1S22P4 Web Interface escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22819
2022-01-294.34.1Schneider Electric EVlink City EVC1S22P4 POST Request cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22725
2022-01-294.34.1Schneider Electric EVlink City EVC1S22P4 POST Request cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22724
2022-01-293.53.4Schneider Electric EVlink City EVC1S22P4 Web Page Generation cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22822
2022-01-295.55.3Schneider Electric EVlink City EVC1S22P4 escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22821
2022-01-293.13.0Schneider Electric EVlink City EVC1S22P4 divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22818
2021-07-223.53.4Schneider Electric EVlink City/EVlink Parking/EVlink Smart Wallbox Web Server cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22723
2021-07-223.53.4Schneider Electric EVlink City/EVlink Parking/EVlink Smart Wallbox CSV Import cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22722
2021-07-222.62.5Schneider Electric EVlink City/EVlink Parking/EVlink Smart Wallbox cifrado débil$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-22774

11 no se muestran más entradas

más entradas por Schneider Electric

Interested in the pricing of exploits?

See the underground prices here!