Unauthorized Access Vulnerability in EcoStruxure Power Commission (Versions prior to V2.25)
CVE-2022-4062 · HIGH Severity
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)
Learn more about our Web Application Penetration Testing UK.