CVE-2020-7579

MEDIUM 6.1CVE-2020-7579 · Published 10/03/2020 · updated 17/06/2026

In short

CVE-2020-7579 is a MEDIUM (CVSS 6.1) vulnerability affecting spectrum power 5 (siemens).
Chance of exploitation in the next 30 days (EPSS): 0.78%, higher than 56.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spectrum power 5 siemens	`= 5.50≤ 5.50`	No fix yet

Description

A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to recommended system configuration, Siemens consideres the environmental vector as CR:L/IR:M/AR:H/MAV:A (4.1).

References

cert-portal.siemens.com/productcert/pdf/ssa-938930.pdf · Vendor Advisory

More vulnerabilities in spectrum power 5

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free