CVE-2020-7579

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-10 · updated 2026-06-17
Weakness: CWE-80

Description

A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to recommended system configuration, Siemens consideres the environmental vector as CR:L/IR:M/AR:H/MAV:A (4.1).

Affected products

Siemens AG Spectrum Power™ 5: through 5.50; 5.50-hf01

References

https://cert-portal.siemens.com/productcert/pdf/ssa-938930.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-938930.pdf

Get alerted when CVE-2020-7579 or the next vulnerability affects your stack