Product by Schneider Electric
Evlink City Evc1s7p4 Firmware
18 known vulnerabilities in Evlink City Evc1s7p4 Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-22707 | Schneider Electric Evlink City Evc1s22p4 Firmware: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2021-22729 | Schneider Electric Evlink City Evc1s22p4 Firmware: Use of Hard-coded Password | 9.8 | |
| Critical | CVE-2021-22727 | Schneider Electric Evlink City Evc1s22p4 Firmware: Insufficient Entropy | 9.8 | |
| Critical | CVE-2021-22730 | Schneider Electric Evlink City Evc1s22p4 Firmware: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2021-22820 | Schneider Electric Evlink City Evc1s22p4 Firmware: security vulnerability | 9.8 | |
| High | CVE-2021-22726 | Schneider Electric Evlink City Evc1s22p4 Firmware: Server-Side Request Forgery (SSRF) | 8.1 | |
| High | CVE-2021-22821 | Schneider Electric Evlink City Evc1s22p4 Firmware: Server-Side Request Forgery (SSRF) | 8.6 | |
| High | CVE-2021-22818 | Schneider Electric Evlink City Evc1s22p4 Firmware: security vulnerability | 7.5 | |
| Medium | CVE-2021-22728 | Schneider Electric Evlink City Evc1s22p4 Firmware: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| High | CVE-2021-22774 | Schneider Electric Evlink City Evc1s22p4 Firmware: security vulnerability | 7.5 | |
| Medium | CVE-2021-22773 | Schneider Electric Evlink City Evc1s22p4 Firmware: Unverified Password Change | 6.5 | |
| High | CVE-2021-22708 | Schneider Electric Evlink City Evc1s22p4 Firmware: Improper Verification of Cryptographic Signature | 7.2 | |
| Medium | CVE-2021-22721 | Schneider Electric Evlink City Evc1s22p4 Firmware: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2021-22723 | Schneider Electric Evlink City Evc1s22p4 Firmware: Cross-site Scripting | 6.1 | |
| Medium | CVE-2021-22706 | Schneider Electric Evlink City Evc1s22p4 Firmware: Cross-site Scripting | 6.1 | |
| Medium | CVE-2021-22822 | Schneider Electric Evlink City Evc1s22p4 Firmware: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-22819 | Schneider Electric Evlink City Evc1s22p4 Firmware: security vulnerability | 4.3 | |
| Medium | CVE-2021-22722 | Schneider Electric Evlink City Evc1s22p4 Firmware: Cross-site Scripting | 5.4 |