What is CVE-2025-5743?

CVE-2025-5743 is a medium-severity vulnerability in Schneider Electric Evlink Wallbox, classified under OS Command Injection. CVSS score: 5.5/10. Published 2025-06-10.

How severe is CVE-2025-5743?

Medium severity. CVSS v3 base score is 5.5 out of 10.

RCE in Schneider Electric Evlink Wallbox

CVE-2025-5743

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.009 (56.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N.

Affected products

Schneider Electric Evlink Wallbox — versions All Versions

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cybersecurity@se.com

Frequently asked questions

What is CVE-2025-5743?: CVE-2025-5743 is a medium-severity vulnerability in Schneider Electric Evlink Wallbox, classified under OS Command Injection. CVSS score: 5.5/10. Published 2025-06-10.
How severe is CVE-2025-5743?: Medium severity. CVSS v3 base score is 5.5 out of 10.