Vulnerabilities > CVE-2022-22732 - Exposure of Resource to Wrong Sphere vulnerability in Schneider-Electric Ecostruxure Power Commission
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources (data) supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission (Versions prior to V2.22)
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |