CVE-2024-32011 — Siemens / Spectrum Power 4

CVE-2024-32011

Siemens / Spectrum Power 4 PUBLISHED

Description (CNA)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

Affected (CNA)

Vendor / product	Versions
Siemens / Spectrum Power 4	affected 0 before V4.70 SP12 Update 2

CWE

CWE-829

References

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.