CVE-2024-32008 — Siemens / Spectrum Power 4

CVE-2024-32008

Siemens / Spectrum Power 4 PUBLISHED

Description (CNA)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.

Affected (CNA)

Vendor / product	Versions
Siemens / Spectrum Power 4	affected 0 before V4.70 SP12 Update 2

CWE

CWE-648

References

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.