Description
A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the update script. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Published: 2023-09-14
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-42356 A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the update script. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
History

Tue, 04 Mar 2025 03:45:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Siemens Spectrum Power 7
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2025-02-27T20:50:26.366Z

Reserved: 2023-07-20T08:17:26.143Z

Link: CVE-2023-38557

cve-icon Vulnrichment

Updated: 2024-08-02T17:46:56.237Z

cve-icon NVD

Status : Modified

Published: 2023-09-14T11:15:07.497

Modified: 2024-11-21T08:13:49.513

Link: CVE-2023-38557

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses