6.9
Medium
CVE-2025-5741 CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EVLink WallBox | Versions not published |
Other CVEs of EVLink WallBox
The 4 CVEs of EVLink WallBox →
CVE-2025-5743
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…
7.0
High
CVE-2025-5742
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when…
5.1
Medium
CVE-2025-5740
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
8.6
High