Description
A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the update script. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Spectrum Power 7 | All versions < V23Q3 | — |
Advisories 2
- ICSA-23-264-02 Siemens Spectrum Power 7 CISA ICS & IT advisories · May 6, 2025
- SSA-357182 SSA-357182: Local Privilege Escalation Vulnerability in Spectrum Power 7 Siemens ProductCERT · Sep 14, 2023