CVE

CVE-2021-22707

9.8

CVSS

Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to issue unauthorized commands to the charging station web server with administrative privileges.

Attack Vector

Privileges Req.

User Interaction

evlink city (evc1s22p4 / evc1s7p4 all versions prior to r8 v3.4.0.1), evlink parking (evw2 / evf2 / ev.2 all versions prior to r8 v3.4.0.1), and evlink smart wallbox (evb1a all versions prior to r8 v3.4.0.1 )

Updated Sep 26, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2021-22707 Scanner

CVE-2021-22707 scanner - Authentication Bypass vulnerability in EVlink City

Used 3.4k times · 3.3k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →