7.8
Élevée
CVE-2024-32010 A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)
Description
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spectrum Power 4 | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Spectrum Power 4
Les 9 CVE de Spectrum Power 4 →
CVE-2026-109619
RCE via stale global state
9.2
Critique
CVE-2026-109618
RCE via OOM corruption
9.2
Critique
CVE-2024-32014
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)
4.7
Moyenne
CVE-2024-32011
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)
8.8
Élevée