CVE-2024-32010 — Siemens / Spectrum Power 4

CVE-2024-32010

Siemens / Spectrum Power 4 PUBLISHED

Description (CNA)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

Affected (CNA)

Vendor / product	Versions
Siemens / Spectrum Power 4	affected 0 before V4.70 SP12 Update 2

CWE

CWE-732

References

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.