CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server.

Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product.

The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suitable for indoor and outdoor use.

Failure to apply the mitigations provided below may risk arbitrary file read, cross-site scripting and remote code execution from a user with authenticated access to the web server, which could result in information disclosure, service interruption, and gain full control of the charging station.

Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product.

The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suitable for indoor and outdoor use.

Failure to apply the mitigations provided below may risk arbitrary file read, cross-site scripting and remote code execution from a user with authenticated access to the web server, which could result in information disclosure, service interruption, and gain full control of the charging station.