Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious parameters are submitted to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款Schneider Electric产品代码问题漏洞
Vulnerability Description
Schneider Electric EVlink City等都是法国施耐德电气(Schneider Electric)公司的电动汽车充电站的一款充电解决方案。 多款Schneider Electric产品存在代码问题漏洞,该漏洞源于当攻击者制造的恶意参数被提交到充电站web服务器时,该漏洞会导致充电站web服务器将请求转发给网络目标。以下产品及版本受到影响:EVlink City EVC1S22P4 EVC1S7P4 (R8 V3.4.0.2之前所有版本)、EVlink Parking EVW2 EVF
CVSS Information
N/A
Vulnerability Type
N/A