CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server.

CWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server.

Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product.

The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suitable for indoor and outdoor use.

Failure to apply the mitigations provided below may risk arbitrary file read, cross-site scripting and remote code execution from a user with authenticated access to the web server, which could result in information disclosure, service interruption, and gain full control of the charging station.

Schneider Electric is aware of multiple vulnerabilities in its EVLink WallBox product.

The EVLink WallBox https://www.se.com/ww/en/product-range/62395-evlink-wallbox/%23products is a charging station for electric vehicles at home or on private property, suitable for indoor and outdoor use.

Failure to apply the mitigations provided below may risk arbitrary file read, cross-site scripting and remote code execution from a user with authenticated access to the web server, which could result in information disclosure, service interruption, and gain full control of the charging station.