Local Privilege Escalation in Spectrum Power 4 by Siemens

CVE-2024-32009

What is CVE-2024-32009?

A security flaw exists in Spectrum Power 4, affecting all versions prior to V4.70 SP12 Update 2. This vulnerability arises from improperly configured permissions on a binary, enabling a local attacker to escalate their privileges and potentially gain administrative access. Users should promptly apply the latest updates to mitigate the risk associated with this vulnerability.

References