Description
A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). The affected product contains several root-owned SUID binaries that could allow an authenticated local attacker to escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Spectrum Power 7 | < V24Q3 | V24Q3 |
Advisories 3
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- ICSA-24-319-09 Siemens Spectrum Power 7 CISA ICS & IT advisories · Nov 12, 2024
- SSA-616032 SSA-616032: Local Privilege Escalation Vulnerability in Spectrum Power 7 Before V24Q3 Siemens ProductCERT · Nov 12, 2024