CVE-2022-4062: Schneider Electric Ecostruxure Power Commission

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)

Affected products

• Schneider Electric Ecostruxure Power Commission: before 2.26 (fixed in 2.26)

Published 2023-02-01. Last modified 2026-06-17.