CVE-2018-7778 In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authent...
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric evlink charging station firmware | < 3.2.0-12_v1 | 3.2.0-12_v1 |
| Schneider Electric SE Evlink Charging Station | = Web Interface, all versions prior to v3.2.0-12_v1 | No fix listed |
References
- www.schneider-electric.com vendor-advisory