CVE-2021-22774

Name of the Vulnerable Software and Affected Versions EVlink City versions prior to R8 V3.4.0.1 EVlink Parking versions prior to R8 V3.4.0.1 EVlink Smart Wallbox versions prior to R8 V3.4.0.1

Description A vulnerability exists due to the use of a one-way hash without a salt, which could allow an attacker to obtain knowledge of charging station user account credentials using dictionary attack techniques. This issue affects the EVlink City, EVlink Parking, and EVlink Smart Wallbox products, and could potentially be exploited by a remote attacker to gain user credentials.

Recommendations For EVlink City versions prior to R8 V3.4.0.1, update to version R8 V3.4.0.1 or later to resolve the issue. For EVlink Parking versions prior to R8 V3.4.0.1, update to version R8 V3.4.0.1 or later to resolve the issue. For EVlink Smart Wallbox versions prior to R8 V3.4.0.1, update to version R8 V3.4.0.1 or later to resolve the issue.