CVE-2021-22821 HIGH

Published: 2022-01-28 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious parameters are submitted to the charging station web server. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 (All versions prior to R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (All versions prior to R8 V3.4.0.2), and EVlink Smart Wallbox EVB1A (All versions prior to R8 V3.4.0.2)

Additional Descriptions (1)

Una CWE-918: Se presenta una vulnerabilidad de tipo Server-Side Request Forgery (SSRF) que podría causar al servidor web de la estación reenviar peticiones a objetivos de red no deseados cuando son enviados parámetros maliciosos diseñados al servidor web de la estación de carga. Productos afectados: EVlink City EVC1S22P4 / EVC1S7P4 (Todas las versiones anteriores a R8 V3.4.0.2 ), EVlink Parking EVW2 / EVF2 / EVP2PE (Todas las versiones anteriores a R8 V3.4.0.2), y EVlink Smart Wallbox EVB1A (Todas las versiones anteriores a R8 V3.4.0.2)

CVSS Metrics

Base Score: 8.6 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	CHANGED
Confidentiality Impact	NONE
Integrity Impact	HIGH
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 4.0

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-918

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	evlink_city_evc1s22p4_firmware	*	<built-in method update of dict object at 0x7e60ba1a00c0>	Operating System
schneider-electric	evlink_city_evc1s7p4_firmware	*	<built-in method update of dict object at 0x7e60eb26fa40>	Operating System
schneider-electric	evlink_parking_evw2_firmware	*	<built-in method update of dict object at 0x7e60eb26e540>	Operating System
schneider-electric	evlink_parking_evf2_firmware	*	<built-in method update of dict object at 0x7e6107fb40c0>	Operating System
schneider-electric	evlink_parking_evp2pe_firmware	*	<built-in method update of dict object at 0x7e60ba1a1e00>	Operating System
schneider-electric	evlink_smart_wallbox_evb1a_firmware	*	<built-in method update of dict object at 0x7e60ba1a2500>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:evlink_city_evc1s22p4_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:evlink_city_evc1s22p4:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:evlink_city_evc1s7p4_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:evlink_city_evc1s7p4:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:evlink_parking_evw2_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:evlink_parking_evw2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:evlink_parking_evf2_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:evlink_parking_evf2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:evlink_parking_evp2pe_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:evlink_parking_evp2pe:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:evlink_smart_wallbox_evb1a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:evlink_smart_wallbox_evb1a:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
Source: [email protected]

Patch Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-02
Source: af854a3a-2127-422b-91ae-364da2661108

Patch Vendor Advisory