← Voltar para CVEs
CVE-2018-7802
N/ADescricao
A SQL Injection vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could give access to the web interface with full privileges.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado12/24/2018
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
schneider-electric:evlink_parkingschneider-electric:evlink_parking_firmware
Fraquezas (CWE)
CWE-89
Referencias
http://www.securityfocus.com/bid/106807(cybersecurity@se.com)
https://ics-cert.us-cert.gov/advisories/ICSA-19-031-01(cybersecurity@se.com)
https://www.schneider-electric.com/en/download/document/SEVD-2018-354-01/(cybersecurity@se.com)
http://www.securityfocus.com/bid/106807(af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-19-031-01(af854a3a-2127-422b-91ae-364da2661108)
https://www.schneider-electric.com/en/download/document/SEVD-2018-354-01/(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.