Skip to content
OpenAdvisories
Low · 3.9 CVE-2022-22732 EUVD-2022-27875GHSA-5w35-cmj6-vc9r

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) sup…

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Power Commission Category: ICS / OT

Description

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Power Commission All – < V2.22 V2.22

Advisories 1

References