Detections
Analytics
CVE-2022-22727
high
Description
A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)
References
https://github.com/Live-Hack-CVE/CVE-2022-22727
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27870
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-07