VYPR
← All advisories
Low severity3.9NVD Advisory· Published Jan 30, 2023· Updated Jun 17, 2026

CVE-2022-22732

CVE-2022-22732

Description

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)

Affected products

3
  • Schneider Electric/Ecostruxure Power Commission3 versions
    cpe:2.3:a:schneider-electric:ecostruxure_power_commission:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:ecostruxure_power_commission:*:*:*:*:*:*:*:*range: <2.22
    • (no CPE)range: <V2.22
    • (no CPE)range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.