3.9
Low
CVE-2022-22732 A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the…
Description
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Power Commission 2.22 | earliest → < 2.22 | 2.22 |
Other CVEs of EcoStruxure Power Commission
The 4 CVEs of EcoStruxure Power Commission →
CVE-2022-4062
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software…
7.8
High
CVE-2022-0223
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
6.5
Medium
CVE-2022-22731
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a…
6.5
Medium