← Database

CVE-2022-22731

MEDIUM CVSS: 6.5 Published: 2023-01-30 Modified: 2026-06-17

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause path traversal attacks. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Affected Platforms

Schneider-Electric Ecostruxure Power Commission

Weakness Type

CWE-22, CWE-22

References