Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-01394
HistoryJan 10, 2024 - 12:00 a.m.

Siemens Spectrum Power 7 Critical Resource Privilege Assignment Error Vulnerability

2024-01-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
siemens
scada
communications
data modeling
vulnerability
misassigned privilege
authenticated attacker
local attacker
arbitrary code
root access

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Spectrum Power 7 provides the essential components of SCADA, communications and data modeling for control and monitoring systems. Application suites can be added to optimize network and generation management in all areas of energy management. Siemens Spectrum Power 7 suffers from a misassigned privilege vulnerability in critical resources, which can be exploited by an authenticated, local attacker to inject arbitrary code and gain root access.

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CNVD-2024-01394