CVE-2020-7579 | BDVDB-2026-131968 Detail

SiemensSpectrum Power™ 5

Description#

A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to recommended system configuration, Siemens consideres the environmental vector as CR:L/IR:M/AR:H/MAV:A (4.1).

Impact#

No impact statement in the source data.

Weaknesses#

CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

References#

https://cert-portal.siemens.com/productcert/pdf/ssa-938930.pdf

Exploit#

No public exploit known

History#

Version 12020-03-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.