VULNERABILITY INTELLIGENCE

CVE-2023-44120

CVSS score7.8 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-01-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.

Weakness classification

  • productcert@siemens.com: CWE-732

Primary references