Schneider-Electric Ecostruxure Power Commission
4 CVEs affecting Schneider-Electric Ecostruxure Power Commission. Latest disclosed: 2023-02-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4062 | High | 7.8 | 2023-02-01 | A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to local… |
CVE-2022-22731 | Medium | 6.5 | 2023-01-30 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to cre… |
CVE-2022-0223 | Medium | 6.5 | 2023-01-30 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker to create or overwri… |
CVE-2022-22732 | Low | 3.9 | 2023-01-30 | A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server… |