CVE-2024-32014 - A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2) · CoreCVE

Back Back to CVE browser

MEDIUM

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)

Published Nov 11, 2025

5.6

MEDIUM

CVSS 4.0

EPSS 0.11%

Description

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the application credentials. This allows an attacker to gain administrative application privileges.

Affected products

Vendor Siemens Product Spectrum Power 4 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.70 SP12 Update 2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Spectrum Power 4

n/a

Version	Status	Constraints
0	affected	<V4.70 SP12 Update 2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (1)

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Nov 11, 2025

Updated Nov 12, 2025

Reserved Apr 8, 2024

Link CVE-2024-32014

CISA Vulnrichment

Updated Nov 12, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-32014

Severity n/a

Public date n/a

Links CVE-2024-32014