Lucene search
SiemensCVELIST:CVE-2021-37207HistoryNov 09, 2021 - 11:32 a.m.
CVE-2021-37207
2021-11-0911:32:03
CWE-732
siemens
www.cve.org
1
vulnerability
sentron powermanager
access rights
configuration files
arbitrary code
privilege escalation
A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
CNA Affected
[
{
"product": "SENTRON powermanager V3",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Related
prion
prion
Improper access control
2021-11-09 12:15:00
cnvd
cnvd
Siemens Sentron Powermanager Local Code Execution Vulnerability
2021-11-11 00:00:00
nvd
nvd
CVE-2021-37207
2021-11-09 12:15:09
ics
ics
Siemens SENTRON powermanager
2021-11-11 12:00:00
cve
cve
CVE-2021-37207
2021-11-09 12:15:09