CVE-2024-32008 - A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2) · CoreCVE

Back Back to CVE browser

HIGH

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)

Published Nov 11, 2025

8.5

HIGH

CVSS 4.0

EPSS 0.12%

Description

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.

Affected products

Vendor Siemens Product Spectrum Power 4 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.70 SP12 Update 2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Spectrum Power 4

n/a

Version	Status	Constraints
0	affected	<V4.70 SP12 Update 2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-648

References (2)

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-339694.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29846		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Nov 11, 2025

Updated Nov 12, 2025

Reserved Apr 8, 2024

Link CVE-2024-32008

CISA Vulnrichment

Updated Nov 12, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-32008

Severity n/a

Public date n/a

Links CVE-2024-32008

Assigner siemens

Published Nov 11, 2025

Updated Nov 12, 2025

Exploited since n/a

Link EUVD-2024-29846

EUVD-2024-29846