Description
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Spectrum Power 4 | All versions < V4.70 SP9 Security Patch 1 | — |
Advisories 2
- ICSA-22-041-06 Siemens Spectrum Power 4 CISA ICS & IT advisories · May 6, 2025
- SSA-831168 SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 Siemens ProductCERT · Feb 8, 2022