CVE-2022-4062: A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to…

PriorityP341high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.17%

6.1th percentile

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_power_commission	< 2.26	2.26
schneider_electric	ecostruxure_power_commission	>= All < V2.25	V2.25

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.