← Database

CVE-2022-22726

MEDIUM CVSS: 6.5 Published: 2022-02-04 Modified: 2026-06-17

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited operating system service account. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Affected Platforms

Schneider-Electric Ecostruxure Power Monitoring Expert

Weakness Type

CWE-20

References