SSA-339694: Multiple Vulnerabilities in Spectrum Power 4 Before v4.70 SP12 Security Patch 2
Spectrum Power 4 before v4.70 SP12 Security Patch 2 contains multiple vulnerabilities that could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator. Siemens has released a new version for Spectrum Power 4 and recommends to update to the latest version.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32014US | — | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the… | ||||
| CVE-2024-32011US | — | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interfac… | ||||
| CVE-2024-32010US | — | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a wor… | ||||
| CVE-2024-32009US | — | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly… | ||||
| CVE-2024-32008US | — | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an expos… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- FixedSpectrum Power 4
Update to V4.70 SP12 Update 2 or later version
- FixedSpectrum Power 4
Update to V4.70 SP12 Update 2 or later version
- FixedSpectrum Power 4
Update to V4.70 SP12 Update 2 or later version
- FixedSpectrum Power 4
Update to V4.70 SP12 Update 2 or later version
- FixedSpectrum Power 4
Update to V4.70 SP12 Update 2 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan