Vulnerability · Published Mar 10, 2020 · Assigned by siemens
CVE-2020-7579
Medium 6.1
In plain English
A medium-severity security flaw in Spectrum Power™ 5 from Siemens AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS NVD)6.1Medium
Exploit odds (30 days)0.8%top 43.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to recommended system configuration, Siemens consideres the environmental vector as CR:L/IR:M/AR:H/MAV:A (4.1).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens AG | Spectrum Power™ 5 | All versions < v5.50 HF02 |
Weakness: CWE-80
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-938930.pdf x_refsource_MISC