Database Manipulation Vulnerability in Spectrum Power 4 by Siemens

CVE-2024-32014

What is CVE-2024-32014?

A serious database manipulation vulnerability exists in Spectrum Power 4 that impacts all versions prior to V4.70 SP12 Update 2. This flaw allows unauthorized users to alter the local database, which houses application credentials. By exploiting this vulnerability, attackers can elevate their privileges to that of an administrator, potentially gaining full control over the application and its operations. Users are advised to upgrade to the patched version to mitigate any risk associated with this vulnerability.

References