CVE:CVE-2021-22723
CNNVD:CNNVD-202107-1603
Schneider Electric EVlink City等都是法国施耐德电气（Schneider Electric）公司的电动汽车充电站的一款充电解决方案。
EVlink City、EVlink Parking存在跨站脚本漏洞，该漏洞源于当恶意参数被提交给充电站web服务器时，攻击者可利用该漏洞可以模拟管理充电站的用户或代表他们执行操作。
solution:Upgrade schneider-electric evlink_city_evc1s22p4_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_city_evc1s7p4_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_evw2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_evf2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_parking_ev.2_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1); Upgrade schneider-electric evlink_smart_wallbox_evb1a_firmware to a higher version than r8_v3.4.0.1,and avoid the version (,r8_v3.4.0.1)