CVE-2022-22732

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Score

CVSS 3.1 7.5 High

Status

Modified - cybersecurity@se.com

Published

2023-01-30

Last modified

2025-02-05

Weaknesses

CWE-668

Affected products

• Ecostruxure Power Commission (Schneider-electric)
• Ecostruxure Power Commission (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-05_EcoSt…