ICSA-25-317-12

icsaUScisa_csaf_ot

Siemens Spectrum Power 4

Advisory ansehen veröffentlicht 2025-11-13

Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator.

01

beschreibt (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-32014US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the…
CVE-2024-32011US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interfac…
CVE-2024-32010US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a wor…
CVE-2024-32009US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly…
CVE-2024-32008US——
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an expos…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • MitigationSpectrum Power 4

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:

  • BehobenSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • BehobenSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • BehobenSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • BehobenSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

  • BehobenSpectrum Power 4

    Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan