High severity8.1NVD Advisory· Published Jul 21, 2021· Updated Jun 17, 2026
CVE-2021-22726
CVE-2021-22726
Description
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to perform unintended actions or access to data when crafted malicious parameters are submitted to the charging station web server.
Affected products
10- cpe:2.3:o:schneider-electric:evlink_city_evc1s22p4_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_city_evc1s7p4_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_parking_ev.2_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_parking_evf2_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_parking_evw2_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_smart_wallbox_evb1a_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <R8 V3.4.0.1
- Range: <R8 V3.4.0.1
- Range: <R8 V3.4.0.1
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdVendor Advisory
News mentions
0No linked articles in our index yet.