Siemens AG CWE-77

http://www.securityfocus.com/bid/107830 No Types Assigned

http://www.securityfocus.com/bid/107830 Third Party Advisory, VDB Entry

A vulnerability has been identified in Spectrum Power? 4 (with Web Office Portal). An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises confidentiality, in

A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises confidentiality, int

http://www.securityfocus.com/bid/107830 [No Types Assigned]

OR
     *cpe:2.3:a:siemens:spectrum_power_4:-:*:*:*:*:*:*:*

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-264

https://cert-portal.siemens.com/productcert/pdf/ssa-324467.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-324467.pdf Mitigation, Vendor Advisory