Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-26476

Опубликовано: 14 июн. 2022
Источник: nvd
CVSS3: 8.8
CVSS2: 5.4
EPSS Низкий

Описание

A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:siemens:spectrum_power_4:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:spectrum_power_7:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:spectrum_power_microgrid_management_system:-:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00127
Низкий

8.8 High

CVSS3

5.4 Medium

CVSS2

Дефекты

CWE-798
CWE-798

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges.

EPSS

Процентиль: 32%
0.00127
Низкий

8.8 High

CVSS3

5.4 Medium

CVSS2

Дефекты

CWE-798
CWE-798