deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20038
Published: 2022-02-09
Description: In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06183335; Issue ID: ALPS06183335.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20039
Published: 2022-02-09
Description: In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06183345; Issue ID: ALPS06183345.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20040
Published: 2022-02-09
Description: In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219150; Issue ID: ALPS06219150.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20041
Published: 2022-02-09
Description: In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108596; Issue ID: ALPS06108596.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20042
Published: 2022-02-09
Description: In Bluetooth, there is a possible information disclosure due to incorrect error handling. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108487; Issue ID: ALPS06108487.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20043
Published: 2022-02-09
Description: In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06148177; Issue ID: ALPS06148177.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20044
Published: 2022-02-09
Description: In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20045
Published: 2022-02-09
Description: In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-20046
Published: 2022-02-09
Description: In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06142410; Issue ID: ALPS06142410.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://corp.mediatek.com/product-security-bulletin/February-2022; https://corp.mediatek.com/product-security-bulletin/February-2022
CVE: CVE-2022-21133
Published: 2022-02-09
Description: Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html
CVE: CVE-2022-21153
Published: 2022-02-09
Description: Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00608.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00608.html
CVE: CVE-2022-21156
Published: 2022-02-09
Description: Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html
CVE: CVE-2022-21157
Published: 2022-02-09
Description: Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00607.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00607.html
CVE: CVE-2022-21174
Published: 2022-02-09
Description: Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE: CVE-2022-21203
Published: 2022-02-09
Description: Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281, CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE: CVE-2022-21204
Published: 2022-02-09
Description: Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE: CVE-2022-21205
Published: 2022-02-09
Description: Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE: CVE-2022-21218
Published: 2022-02-09
Description: Uncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755, CWE-755
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html
CVE: CVE-2022-21220
Published: 2022-02-09
Description: Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-611, CWE-611
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html
CVE: CVE-2022-21226
Published: 2022-02-09
Description: Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html
CVE: CVE-2022-21825
Published: 2022-02-09
Description: An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://support.citrix.com/article/CTX338435; https://support.citrix.com/article/CTX338435
CVE: CVE-2022-22528
Published: 2022-02-09
Description: SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://launchpad.support.sap.com/#/notes/3140564; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3140564
CVE: CVE-2022-22532
Published: 2022-02-09
Description: In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling. This could allow the malicious payload to be executed and hence execute functions that could be impersonating the victim or even steal the victim's logon session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444, CWE-444
References: https://launchpad.support.sap.com/#/notes/3123427; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3123427
CVE: CVE-2022-22533
Published: 2022-02-09
Description: Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://launchpad.support.sap.com/#/notes/3123427; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3123427
CVE: CVE-2022-22534
Published: 2022-02-09
Description: Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3124994; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3124994
CVE: CVE-2022-22535
Published: 2022-02-09
Description: SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://launchpad.support.sap.com/#/notes/3126489; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3126489
CVE: CVE-2022-22536
Published: 2022-02-09
Description: SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-444, CWE-444
References: https://launchpad.support.sap.com/#/notes/3123396; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3123396
CVE: CVE-2022-22537
Published: 2022-02-09
Description: When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3134684; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3134684
CVE: CVE-2022-22538
Published: 2022-02-09
Description: When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://launchpad.support.sap.com/#/notes/3134684; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3134684
CVE: CVE-2022-22539
Published: 2022-02-09
Description: When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3134684; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3134684
CVE: CVE-2022-22540
Published: 2022-02-09
Description: SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to execute crafted database queries, that could expose the backend database. Successful attacks could result in disclosure of a table of contents from the system, but no risk of modification possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://launchpad.support.sap.com/#/notes/3140587; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3140587
CVE: CVE-2022-22542
Published: 2022-02-09
Description: S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitly authorized to have access to that information, which could compromise Confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3142092; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3142092
CVE: CVE-2022-22543
Published: 2022-02-09
Description: SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, which could lead to a Denial-of-Service attack. This allows an unauthorized remote user to provoke a breakdown of the SAP Web Dispatcher or Kernel work process. The crashed process can be restarted immediately, other processes are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://launchpad.support.sap.com/#/notes/3116223; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3116223
CVE: CVE-2022-22544
Published: 2022-02-09
Description: Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty for the SAP Solution Manager administrator. Impacts of unauthorized execution of commands can lead to sensitive information disclosure, loss of system integrity and denial of service.
CVSS Score: 9.1 (CRITICAL)
References: https://launchpad.support.sap.com/#/notes/3140940; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3140940
CVE: CVE-2022-22545
Published: 2022-02-09
Description: A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3128473; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3128473
CVE: CVE-2022-22546
Published: 2022-02-09
Description: Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3126748; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3126748
CVE: CVE-2022-22779
Published: 2022-02-09
Description: The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.
CVSS Score: 3.7 (LOW)
CWE: CWE-212
References: https://explore.zoom.us/en/trust/security/security-bulletin; https://explore.zoom.us/en/trust/security/security-bulletin
CVE: CVE-2022-22780
Published: 2022-02-09
Description: The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availability issues on the client host by exhausting system resources.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: https://explore.zoom.us/en/trust/security/security-bulletin; https://explore.zoom.us/en/trust/security/security-bulletin
CVE: CVE-2022-22807
Published: 2022-02-09
Description: A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
CVSS Score: 7.4 (HIGH)
CWE: CWE-1021, CWE-1021
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-02; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-02
CVE: CVE-2022-22808
Published: 2022-02-09
Description: A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink Load Management System): (HMIBSCEA53D1EDB, HMIBSCEA53D1EDS, HMIBSCEA53D1EDM, HMIBSCEA53D1EDL, HMIBSCEA53D1ESS, HMIBSCEA53D1ESM, HMIBSCEA53D1EML) (All Versions prior to SP8 (Version 01) V4.0.0.13)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-02; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-02
CVE: CVE-2022-22809
Published: 2022-02-09
Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
CVE: CVE-2022-22810
Published: 2022-02-09
Description: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04