CVE-2021-22707 Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
Hardcoded credentials in EVlink charging stations allow attackers to gain administrative access and issue unauthorized commands.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22707?
CVE-2021-22707 is a critical vulnerability in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ), published on 21 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges.
Weakness: CWE-798
Which versions are affected by CVE-2021-22707?
It affects 6 products.
Products include Schneider-Electric Evlink City Evc1s22p4 Firmware, Schneider-Electric Evlink City Evc1s7p4 Firmware, Schneider-Electric Evlink Parking Ev.2 Firmware, Schneider-Electric Evlink Parking Evf2 Firmware, Schneider-Electric Evlink Parking Evw2 Firmware, Schneider-Electric Evlink Smart Wallbox Evb1a Firmware.
How do I fix CVE-2021-22707?
No fix has been published for CVE-2021-22707 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22707 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-22707 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22820 Auth bypass in n/a
- CVE-2021-22727 Weak cryptography in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22729 Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22730 Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
- CVE-2021-22821 Server-side request forgery in n/a
Sources
Also known as GHSA-588r-rc4p-m49f.