ICSA-19-099-02 Siemens Spectrum Power 4.7
view advisory published 2019-04-09
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6579US | critical9.8 | — | ||
A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system c… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationSpectrum Power 4
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:firewall. Turn off the web server or limit access to the web server by an external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan