EcoStruxure Power Operation and Power SCADA Operation Security Notification

This document details a high-severity improper input validation vulnerability (CVE-2022-22727) affecting EcoStruxure Power Operation 2021 and EcoStruxure Power SCADA Operation 2020/2020 R2, which could allow an unauthenticated attacker to view data, change settings, or impact system availability via a specially crafted link. It provides remediation instructions, including specific cumulative updates (CU1 for SCADA Operation 2020 R2, CU3 for Power Operation 2021), and general cybersecurity best practices for industrial control systems.