Skip to main content

Spectrum Power 7

6 CVEs product

Monthly

CVE-2021-44228 Dec 10, 10:15 Maven CRITICAL POC KEV PATCH THREAT Act Now

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

RCE Apache Apple Cisco Debian +149
NVD GitHub Exploit-DB
CVSS 3.1
10.0
EPSS
94.4%
Threat
9.8
CVE-2024-29119 Nov 12, 13:15 HIGH This Week

A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Siemens Spectrum Power 7
NVD
CVSS 4.0
8.5
EPSS
0.1%
CVE-2023-44120 Jan 09, 10:15 HIGH This Week

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Siemens Spectrum Power 7
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2023-38557 Sep 14, 11:15 HIGH This Week

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Siemens Spectrum Power 7
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2022-26476 Jun 14, 10:15 HIGH This Week

A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Siemens Spectrum Power 7 Spectrum Power 4 Spectrum Power Microgrid Management System
NVD
CVSS 3.1
8.8
EPSS
0.4%
CVE-2019-10933 Jul 11, 22:15 MEDIUM This Month

A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate User Interface) (Version v4.75), Spectrum Power 5 (Corporate. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Siemens Spectrum Power 7 Spectrum Power 4 Spectrum Power 3 +1
NVD
CVSS 3.0
6.1
EPSS
0.8%
EPSS 94% 9.8 CVSS 10.0
CRITICAL POC KEV PATCH THREAT Act Now

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

RCE Apache Apple +151
NVD GitHub Exploit-DB
EPSS 0% CVSS 8.5
HIGH This Week

A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Siemens Spectrum Power 7
NVD
EPSS 0% CVSS 7.8
HIGH This Week

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Siemens Spectrum Power 7
NVD
EPSS 0% CVSS 7.8
HIGH This Week

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Siemens Spectrum Power 7
NVD
EPSS 0% CVSS 8.8
HIGH This Week

A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Siemens Spectrum Power 7 +2
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate User Interface) (Version v4.75), Spectrum Power 5 (Corporate. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Siemens Spectrum Power 7 +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy