CVE-2024-32011

State: Published
Severity: 8.7 High
Published: Nov 11, 2025
Updated: Nov 12, 2025
Reserved: Apr 8, 2024

Description

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	siemens
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	siemens

Weaknesses

CWE-829 Inclusion of Functionality from Untrusted Control Sphere

Affected Products

Product	Versions
Spectrum Power 4Siemens	before V4.70 SP12 Update 2Affected

References

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.