CVE:CVE-2021-22721
CNNVD:CNNVD-202107-1605
Schneider Electric EVlink City等都是法国施耐德电气（Schneider Electric）公司的电动汽车充电站的一款充电解决方案。
EVlink City、EVlink Parking、EVlink Smart Wallbox存在信息泄露漏洞，该漏洞源于当恶意参数被提交给充电站web服务器时，可以允许攻击者可利用该漏洞获得有限的javascript代码知识。
solution:Upgrade schneider-electric evlink_city_evc1s22p4_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_city_evc1s7p4_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_evw2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_evf2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_ev.2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_smart_wallbox_evb1a_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1)