← Database

CVE-2022-22727

HIGH CVSS: 8.8 Published: 2022-02-04 Modified: 2026-06-17

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Affected Platforms

Schneider-Electric Ecostruxure Power Monitoring Expert

Weakness Type

CWE-20, CWE-20

References