Siemens Spectrum Power 7 — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Spectrum Power 7, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2021-45046 — CVSS 9.0 (critical) — actively exploited: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could…
• CVE-2022-26476 — CVSS 8.8 (high): A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS)…
• CVE-2023-38557 — CVSS 8.2 (high): A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the…
• CVE-2023-44120 — CVSS 7.8 (high): A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local…
• CVE-2024-29119 — CVSS 7.8 (high): A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). The affected product contains several root-owned SUID…
• CVE-2019-10933 — CVSS 6.1 (medium): A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate…