Severity
High
Analysis Summary
An attacker with network access to the web server on Port 80/TCP or 443/TCP could execute system commands with administrative privileges.
Impact
Command Injection
Affected Vendors
Siemens
Affected Products
Spectrum Power 4.7
Remediation
Vendor recommends users to install bugfix bf-47456_PE_WOP_fix which can be obtained from the vendor at : support.energy@siemens.com