Ecostruxure Power Commission (Schneider-electric) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-02-01. Vendor: Schneider-electric.

CVEs of Ecostruxure Power Commission

• CVE-2022-4062 - CVSS 7.8 (high), 2023-02-01: A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to…
• CVE-2022-22732 - CVSS 7.5 (high), 2023-01-30: A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server…
• CVE-2022-22731 - CVSS 9.8 (critical), 2023-01-30: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to…
• CVE-2022-0223 - CVSS 9.8 (critical), 2023-01-30: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker to create or…