CVE-2025-5743 — Schneider Electric / EVLink WallBox

CVE-2025-5743

Schneider Electric / EVLink WallBox PUBLISHED

Description (CNA)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EVLink WallBox	affected All Versions

CWE

CWE-78

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-03.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.