Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:spectrum_power_4:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSpectrum Power 4 (77e0d20e-76b1-5a8f-8fd6-9190e42c362a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32014 vulnerable 2026-06-08 06:35:32.622083 Details available
MEDIUM (4.7)
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the application credentials. This allows an attacker to gain administrative application privileges.
Published: 2025-11-11T20:20:19.638Z
Updated: 2025-11-12T21:02:07.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32011 vulnerable 2026-06-08 06:35:32.621850 Details available
HIGH (8.8)
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.
Published: 2025-11-11T20:20:18.134Z
Updated: 2025-11-12T21:09:08.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32010 vulnerable 2026-06-08 06:35:32.621484 Details available
HIGH (7.8)
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.
Published: 2025-11-11T20:20:16.806Z
Updated: 2025-11-12T21:32:00.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32009 vulnerable 2026-06-08 06:35:32.621233 Details available
HIGH (7.8)
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges.
Published: 2025-11-11T20:20:15.452Z
Updated: 2025-11-12T21:38:42.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32008 vulnerable 2026-06-08 06:35:32.620909 Details available
HIGH (7.8)
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.
Published: 2025-11-11T20:20:13.812Z
Updated: 2025-11-12T21:44:22.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26476 vulnerable 2026-06-08 05:41:52.230704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23312 vulnerable 2026-06-08 05:40:56.976132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45046 vulnerable 2026-06-08 05:36:47.737809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44228 vulnerable 2026-06-08 05:36:45.241216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15790 vulnerable 2026-06-08 05:19:26.648003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15784 vulnerable 2026-06-08 05:19:26.631531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10933 vulnerable 2026-06-08 05:12:25.774189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.