Siemens Spectrum Power 4
view advisory published 2022-02-08
A Cross-Site Scripting (XSS) vulnerability is found in the integrated web application "Online Help" of Spectrum Power 4. Siemens has released an update for the Spectrum Power 4 and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23312US | medium6.1 | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cro… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - CSAF Versionself
- SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - PDF Versionself
- SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - TXT Versionself
- ICS Advisory ICSA-22-041-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-041-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationSpectrum Power 4
Do not open unknown links while working on Spectrum Power 4.
- FixedSpectrum Power 4
Update to V4.70 SP9 Security Patch 1 or later version. Please contact your local Siemens representative.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan