CVE-2019-6579— Siemens Spectrum Power 权限许可和访问控制问题漏洞

N/A

A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises confidentiality, integrity or availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

N/A

在命令中使用的特殊元素转义处理不恰当(命令注入)

Siemens Spectrum Power 权限许可和访问控制问题漏洞

Siemens Spectrum Power是德国西门子（Siemens）公司的一套能源管理系统。 Siemens Spectrum Power中存在权限许可和访问控制问题漏洞。该漏洞源于网络系统或产品缺乏有效的权限许可和访问控制措施。

N/A

N/A