Skip to content
OpenAdvisories
High · 7.8 CVE-2022-4062 EUVD-2022-51439GHSA-5cvq-r9w7-fcqv

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker …

Published Feb 1, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Power Commission Category: ICS / OT

Description

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Power Commission All – < V2.25 V2.25

Advisories 1

References