Schneider-electric Evlink Parking Evp2pe Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Evlink Parking Evp2pe Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-22820 — CVSS 9.8 (critical): A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a…
• CVE-2021-22821 — CVSS 8.6 (high): A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended…
• CVE-2021-22818 — CVSS 7.5 (high): A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized…
• CVE-2021-22822 — CVSS 6.1 (medium): A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an…
• CVE-2021-22819 — CVSS 4.3 (medium): A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the…