Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-44120

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.

Published

2024-01-09T10:15:15.613

Last Modified

2024-11-21T08:25:17.160

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens spectrum_power_7 < 23q4 Yes
References