CVE-2018-7802 is a high-severity SQL Injection vulnerability affecting Schneider Electric EVLink Parking versions 3.2.0-12_v1 and earlier. This flaw allows an authenticated attacker to gain full administrative access to the web interface. With a CVSS score of 8.8, it presents a significant risk due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there's minimal community discussion, the vulnerability's high FAUCET Risk Score of 70/100 indicates its potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.2.0-12CPE matchmatch criteria | cpe:2.3:o:schneider-electric:evlink_parking_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.