Unauthenticated Remote Privilege Escalation in Schneider Electric Evlink Charging Station Web Interface

Unauthenticated Remote Privilege Escalation in Schneider Electric Evlink Charging Station Web Interface

CVE-2018-7778 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users.

Learn more about our Web App Pen Testing.