Siemens Spectrum Power 7

An authenticated user with administrative-level access on a Spectrum Power 7 workstation or server could inject malicious code during the update process to gain further privilege escalation, potentially allowing them to modify grid monitoring data, control system configurations, or disable parts of the SCADA infrastructure that monitors power distribution.

Electric utilities and power system operators who use Siemens Spectrum Power 7 for grid monitoring, data management, and control coordination should prioritize this patch. This affects Transmission System Operators (TSOs) and Distribution System Operators (DSOs), particularly those running versions earlier than 23Q3. The vulnerability is primarily a risk to the engineering and operations staff who have administrative access to these control systems.

An attacker with local access and elevated credentials on a Spectrum Power 7 system can intercept or modify the update script before it executes. By injecting arbitrary code into this script, the attacker can escalate their privileges beyond their current permission level when the update runs. This requires physical or direct network access to the affected workstation or server, plus valid authenticated credentials at a higher privilege level than the attacker initially has.