Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-89429
HistoryNov 11, 2021 - 12:00 a.m.

Siemens Sentron Powermanager Local Code Execution Vulnerability

2021-11-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
siemens sentron powermanager
local code execution
vulnerability
power management software
siemens
german company
access rights
configuration files
local attacker
arbitrary code
privilege escalation
authentication

EPSS

0

Percentile

5.1%

Siemens Sentron Powermanager is a power management software from Siemens, a German company. A local code execution vulnerability exists in Siemens Sentron Powermanager, which stems from an affected application assigning incorrect access rights to a specific folder containing configuration files. A local attacker who is allowed to authenticate could exploit the vulnerability to inject arbitrary code and escalate privileges.

EPSS

0

Percentile

5.1%

Related for CNVD-2021-89429