Schneider Electric EcoStruxure Power Commission 安全漏洞

Schneider Electric EcoStruxure Power Commission is a comprehensive software from Schneider Electric France that provides powerful features for setting up, testing, and commissioning low-voltage distribution cabinets. A security vulnerability exists in EcoStruxure Power Commission versions prior t...

CVE-2022-22732

EcoStruxure Power Commission (Schneider Electric) versions prior to V2.22 are affected by CWE-668: Exposure of Resource to Wrong Sphere, which could allow remote domains to access server data via a fetch from a third-party or malicious site. The root cause is improper data sphere exposure, enabli...

CVE-2022-22732

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources data supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission Versions pri...

CVE-2022-0223

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause unauthenticated code execution. Affected Products:...

CVE-2022-22731

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause path traversal attacks. Affected...

CVE-2022-22731

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in a function that could allow an attacker to create or overwrite critical files that are used to execute code, such as programs or libraries and cause path traversal attacks. Affected...

CVE-2022-0223

CVE-2022-0223 (EcoStruxure Power Commission) is a path traversal vulnerability caused by improper restriction of a pathname to a restricted directory, potentially allowing an attacker to create or overwrite files used to execute code. Affected: EcoStruxure Power Commission versions before 2.22. I...

Schneider Electric EcoStruxure Power Commission 路径遍历漏洞

Schneider Electric EcoStruxure Power Commission is a comprehensive software from Schneider Electric France that provides powerful features for setting up, testing, and commissioning low-voltage distribution cabinets. A path traversal vulnerability exists in Schneider Electric EcoStruxure Power...

CVE-2022-22731

The CVE-2022-22731 entry describes a Path Traversal vulnerability in EcoStruxure Power Commission prior to v2.22. The root cause is an improper limitation of a pathname to a restricted directory, enabling an attacker to create or overwrite critical files used to execute code. Affected product: Ec...

CVE-2022-22732

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources data supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission Versions pri...

PT-2022-6395 · Schneider Electric · Ecostruxure Power Commission

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Commission versions prior to V2.25 Description: A vulnerability exists that could cause unauthorized access to certain software functions when an attacker gains access to the localhost interface of the EcoStruxure Power...

Vulnerability of software for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission devices—related to the disclosure of information in error-prone areas—allows a perpetrator to disclose protected information.

The vulnerability of the software for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission involves exposing information in the error-prone data area. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially...

The software for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission is vulnerable due to incorrect restrictions on the path to the restricted access catalog. This allows attackers to create or overwrite critical files and execute arbitrary code.

The vulnerability of the software used for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission involves incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to create or re-record...

PT-2022-3480 · Schneider Electric · Ecostruxure Power Commission

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Commission versions prior to V2.22 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow a remote attacker to...

PT-2022-3521 · Schneider Electric · Ecostruxure Power Commission

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Commission versions prior to V2.22 Description: A vulnerability exists that could cause all remote domains to access the resources supplied by the server when an attacker sends a fetch request from a third-party site or...