CVE-2022-26476
- State
- Published
- Severity
- Not scored
- Published
- Jun 14, 2022
- Updated
- Aug 3, 2024
- Reserved
- Mar 4, 2022
Description
A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges.
Scores
The record has no CVSS score.
Weaknesses
- CWE-798 Use of Hard-coded Credentials
Affected Products
| Product | Versions |
|---|---|
Spectrum Power 4Siemens |
|
Spectrum Power 7Siemens |
|
Spectrum Power MGMSSiemens |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.