Path Traversal Vulnerability in EcoStruxure Power Commission by Schneider Electric
CVE-2022-0223
6.5MEDIUM
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 30 January 2023
What is CVE-2022-0223?
A vulnerability exists in the EcoStruxure Power Commission software due to improper limitations of pathname, allowing attackers to exploit this weakness. This may enable unauthorized users to create or overwrite essential files, leading to potential unauthenticated code execution. It is crucial for users of affected versions to update their software to mitigate the risk of exploitation.
Affected Version(s)
EcoStruxure Power Commission All