cve-2021-22707

{
  "cvss": 0.0,
  "datePublished": "2024-02-14T00:00:00Z",
  "dateUpdated": "2024-02-14T00:00:00Z",
  "description": "A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges.",
  "dueDate": "",
  "id": "CVE-2021-22707",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "evlink_city_evc1s22p4_firmware",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "Schneider Electric evlink_city_evc1s22p4_firmware Use of Hard-coded Credentials",
  "vendor": "Schneider Electric"
}