PT-2021-15210

CVE-2021-22773

·

Published

2021-07-21

·

Updated

2021-07-28

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions EVlink City versions prior to R8 V3.4.0.1 EVlink Parking versions prior to R8 V3.4.0.1 EVlink Smart Wallbox versions prior to R8 V3.4.0.1
Description A CWE-620: Unverified Password Change issue exists that could allow an attacker connected to the charging station web server to modify the password of a user.
Recommendations For EVlink City versions prior to R8 V3.4.0.1, update to R8 V3.4.0.1 or later to resolve the issue. For EVlink Parking versions prior to R8 V3.4.0.1, update to R8 V3.4.0.1 or later to resolve the issue. For EVlink Smart Wallbox versions prior to R8 V3.4.0.1, update to R8 V3.4.0.1 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-620: Unverified Password Change
Related identifiers
CVE-2021-22773
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com