Skip to content
Sign in
Not rated

CVE-2022-22726 A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by…

Description

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited operating system service account. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Power Monitoring Expert (Versions 2020 and prior) Versions not published

Other CVEs of EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

The 3 CVEs of EcoStruxure Power Monitoring Expert (Versions 2020 and prior) →
CVE-2022-22804 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that… Not rated CVE-2022-22727 A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data,… Not rated
Track this CVE