CVE-2022-22727
CVE-2022-22727
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
04 feb 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact availability of the software, or potentially impact a user�s local machine when the user clicks a specially crafted link. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)
Productos afectados
n/a · EcoStruxure Power Monitoring Expert (Versions 2020 and prior)