CVE-2022-26476

Name of the Vulnerable Software and Affected Versions Spectrum Power 4 versions using Shared HIS Spectrum Power 7 versions using Shared HIS Spectrum Power MGMS versions using Shared HIS

Description A vulnerability has been identified that allows an unauthenticated attacker to log into the Shared HIS component used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the Shared HIS component with administrative privileges.

Recommendations For Spectrum Power 4 versions using Shared HIS, change the default credentials of the Shared HIS account to prevent unauthorized access. For Spectrum Power 7 versions using Shared HIS, change the default credentials of the Shared HIS account to prevent unauthorized access. For Spectrum Power MGMS versions using Shared HIS, change the default credentials of the Shared HIS account to prevent unauthorized access.