CVE-2024-32010

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

Score

CVSS 4.0 8.5 High

Status

Deferred - productcert@siemens.com

Published

2025-11-11

Last modified

2026-10-23

Weaknesses

CWE-732

Affected products

• Spectrum Power 4 (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-339694.html