Command Execution Vulnerability in Spectrum Power 4 by Siemens

CVE-2019-6579

Summary

A vulnerability in Spectrum Power 4 with the Web Office Portal allows attackers with network access to the web server on ports 80 or 443 to execute system commands with administrative privileges. This vulnerability can be exploited by unauthenticated attackers without any need for user interaction, posing a serious risk to the confidentiality, integrity, and availability of the system. At the time of the advisory's release, there were no reports of public exploitation of this issue.

References