CVE-2022-26476

A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), Spectrum Power MGMS (All versions using Shared HIS). An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an account with default credentials. A successful exploitation could allow the attacker to access the component Shared HIS with administrative privileges.

• CWE-798
• CWE-798

• https://cert-portal.siemens.com/productcert/pdf/ssa-388239.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-388239.pdfVendor Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26470In aie, there is a possible out of bounds write due to an in…6.7
• CVE-2022-26471In telephony, there is a possible escalation of privilege du…7.8
• CVE-2022-26472In ims, there is a possible escalation of privilege due to a…7.8
• CVE-2022-26473In vdec fmt, there is a possible use after free due to impro…6.7
• CVE-2022-26474In sensorhub, there is a possible out of bounds write due to…6.7
• CVE-2022-26475In wlan, there is a possible out of bounds write due to a mi…6.7
• CVE-2022-26477The Security Team noticed that the termination condition of …7.5
• CVE-2022-26479An issue was discovered in Poly EagleEye Director II before …9.8
• CVE-2022-2648A vulnerability was found in SourceCodester Multi Language H…9.8
• CVE-2022-26481An issue was discovered in Poly Studio before 3.7.0. Command…8.8
• CVE-2022-26482An issue was discovered in Poly EagleEye Director II before …7.2
• CVE-2022-26483An issue was discovered in Veritas InfoScale Operations Mana…4.8