What is CVE-2023-44120?

CVE-2023-44120 is a high-severity vulnerability in Siemens Spectrum Power 7, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2024-01-09.

How severe is CVE-2023-44120?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Siemens Spectrum Power 7

CVE-2023-44120

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated l…

EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Siemens Spectrum Power 7 — versions All versions < V23Q4
Siemens Spectrum_power_7

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-44120?: CVE-2023-44120 is a high-severity vulnerability in Siemens Spectrum Power 7, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2024-01-09.
How severe is CVE-2023-44120?: High severity. CVSS v3 base score is 7.8 out of 10.