Medium severity6.5NVD Advisory· Published Jul 21, 2021· Updated Jun 17, 2026
CVE-2021-22773
CVE-2021-22773
Description
A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker connected to the charging station web server to modify the password of a user.
Affected products
10- cpe:2.3:o:schneider-electric:evlink_city_evc1s22p4_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_city_evc1s7p4_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_parking_ev.2_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_parking_evf2_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_parking_evw2_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- cpe:2.3:o:schneider-electric:evlink_smart_wallbox_evb1a_firmware:*:*:*:*:*:*:*:*Range: <r8_v3.4.0.1
- Schneider Electric/EVlink Citydescription
- Range: <R8 V3.4.0.1
- Range: <R8 V3.4.0.1
- Range: <R8 V3.4.0.1
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdVendor Advisory
News mentions
0No linked articles in our index yet.