CVE-2020-7579CWE-80

A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02)

published March 10, 2020

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to recommended system configuration, Siemens consideres the environmental vector as CR:L/IR:M/AR:H/MAV:A (4.1).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00785 · 55.6th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2020-03-10T19:16Z
EPSS history
Timeline
  • 10 MAR 19:16Z
    A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02)
    cvelistv5