← Database

CVE-2022-4062

HIGH CVSS: 7.8 Published: 2023-02-01 Modified: 2026-06-17

Description

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)

Affected Platforms

Schneider-Electric Ecostruxure Power Commission

Weakness Type

CWE-285

References