A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-786191.pdf | Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-786191.pdf | Vendor Advisory |
Configurations
History
21 Nov 2024, 08:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-786191.pdf - Vendor Advisory |
16 Jan 2024, 15:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:* | |
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-786191.pdf - Vendor Advisory | |
| First Time |
Siemens
Siemens spectrum Power 7 |
09 Jan 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-09 10:15
Updated : 2024-11-21 08:25
NVD link : CVE-2023-44120
Mitre link : CVE-2023-44120
CVE.ORG link : CVE-2023-44120
JSON object : View
Products Affected
siemens
- spectrum_power_7
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource