7.8
High
CVE-2022-4062 A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software…
Description
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Power Commission 2.25 | earliest → < 2.25 | 2.25 |
Other CVEs of EcoStruxure Power Commission
The 4 CVEs of EcoStruxure Power Commission →
CVE-2022-0223
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
6.5
Medium
CVE-2022-22731
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a…
6.5
Medium
CVE-2022-22732
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the…
3.9
Low