CVE-2023-44120

Name of the Vulnerable Software and Affected Versions Spectrum Power 7 versions prior to V23Q4

Description A vulnerability has been identified in the sudo configuration of the affected product, allowing the local administrative account to execute several entries as the root user. This could enable an authenticated local attacker to inject arbitrary code and gain root access.

Recommendations For versions prior to V23Q4, update to version V23Q4 or later to resolve the issue. As a temporary workaround, consider restricting the sudo configuration to prevent the local administrative account from executing entries as the root user.