{"cvss":0.0,"datePublished":"2024-02-14T00:00:00Z","dateUpdated":"2024-02-14T00:00:00Z","description":"A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges.","dueDate":"","id":"CVE-2021-22707","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"evlink_city_evc1s22p4_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Schneider Electric evlink_city_evc1s22p4_firmware Use of Hard-coded Credentials","vendor":"Schneider Electric"}