Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-22731 EUVD-2022-27874GHSA-2qpf-65jf-g7q2

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allo…

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Power Commission Category: ICS / OT

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause path traversal attacks. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Power Commission All – < V2.22 V2.22

Advisories 1

References