CVE-2025-5741 — Schneider Electric / EVLink WallBox

CVE-2025-5741

Schneider Electric / EVLink WallBox PUBLISHED

Description (CNA)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EVLink WallBox	affected All Versions

CWE

CWE-22

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.