Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-0223 EUVD-2022-15424GHSA-4636-45w3-pr9q

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker …

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Power Commission Category: ICS / OT

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause unauthenticated code execution. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Power Commission All – < V2.22 V2.22

Advisories 1

References