CVE-2024-32009
highpriority · track · 0EPSS 0.001 · 2 %ileDEEUNLRUUSEPSS · scored 2026-10-27
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSpectrum Power 4siemens_psirt
Update to V4.70 SP12 Update 2 or later version
- FixedSpectrum Power 4cisa_csaf_ot
Spectrum Power 4: Update to V4.70 SP12 Update 2 or later version
- MitigationSpectrum Power 4cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.9–8.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (87)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- NCSC-2025-0357Kwetsbaarheden verholpen in Siemens productenNL2025-11-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Altair Grid Engine, COMOS, LOGO, SICAM, SIDOOR, SIMATIC, SIPLUS, Spectrum Power en Solid Edge.
- SSA-339694SSA-339694: Multiple Vulnerabilities in Spectrum Power 4 Before v4.70 SP12 Security Patch 22025-11-11csaf · siemens_psirtDE
Spectrum Power 4 before v4.70 SP12 Security Patch 2 contains multiple vulnerabilities that could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator. Siemens has released a new version for Spectrum Power 4 and recommends to update to the latest version.
- ICSA-25-317-12Siemens Spectrum Power 42025-11-13icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan