What is CVE-2023-44120?

CVE-2023-44120 is a high-severity vulnerability in Siemens Spectrum Power 7, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2024-01-09.

How severe is CVE-2023-44120?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Siemens Spectrum Power 7

CVE-2023-44120

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access.

EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Siemens Spectrum Power 7 — versions All versions < V23Q4
Siemens Spectrum_power_7

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-44120?: CVE-2023-44120 is a high-severity vulnerability in Siemens Spectrum Power 7, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2024-01-09.
How severe is CVE-2023-44120?: High severity. CVSS v3 base score is 7.8 out of 10.