ICSA-25-317-12

icsaUScisa_csaf_ot

Siemens Spectrum Power 4

view advisory published 2025-11-13

Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-32014US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the…
CVE-2024-32011US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interfac…
CVE-2024-32010US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a wor…
CVE-2024-32009US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly…
CVE-2024-32008US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an expos…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • FixedSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • FixedSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • FixedSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • FixedSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • FixedSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan