Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-620
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2930 1 Octoprint 1 Octoprint 2022-08-23 N/A 7.8 HIGH
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
CVE-2021-22773 1 Schneider-electric 12 Evlink City Evc1s22p4, Evlink City Evc1s22p4 Firmware, Evlink City Evc1s7p4 and 9 more 2021-07-28 4.0 MEDIUM 6.5 MEDIUM
A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker connected to the charging station web server to modify the password of a user.