CVE-2023-44120
Assigner: siemens
Published: 2024-01-09T09:59:44.755Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.
affected: vendor: Siemens
product: Spectrum Power 7
versions: version: All versions < V23Q4
status: affected
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.8
baseSeverity: HIGH
problemTypes: descriptions: cweId: CWE-732
description: CWE-732: Incorrect Permission Assignment for Critical Resource
type: CWE