Local Privilege Escalation in Spectrum Power 4 by Siemens
CVE-2024-32009
8.5HIGH
What is CVE-2024-32009?
A security flaw exists in Spectrum Power 4, affecting all versions prior to V4.70 SP12 Update 2. This vulnerability arises from improperly configured permissions on a binary, enabling a local attacker to escalate their privileges and potentially gain administrative access. Users should promptly apply the latest updates to mitigate the risk associated with this vulnerability.
Affected Version(s)
Spectrum Power 4 0
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved