Vulnerability Description
A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Spectrum Power 4 | - |
| Siemens | Spectrum Power 7 | - |
| Siemens | Spectrum Power Microgrid Management System | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-388239.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-388239.pdfVendor Advisory
FAQ
What is CVE-2022-26476?
CVE-2022-26476 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unaut...
How severe is CVE-2022-26476?
CVE-2022-26476 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-26476?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Spectrum Power 4, Siemens Spectrum Power 7, Siemens Spectrum Power Microgrid Management System.