CVE-2024-32010 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-32010 PUBLISHED CVSS 7.800000190734863 HIGH

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

EPSS 0.02% · 6.1th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.02%

6.1th percentile

Affected Products

Vendor	Product	Versions
Siemens	Spectrum Power 4	0

Timeline

Nov 11, 2025 CVE Published
Nov 11, 2025 PoC Published
Nov 12, 2025 EPSS Score
Nov 12, 2025 Coalition ESS Score
Nov 12, 2025 PoC Published
Nov 13, 2025 PoC Published
Nov 14, 2025 Coalition ESS Score
Nov 17, 2025 EPSS Score
Nov 21, 2025 EPSS Score
Nov 26, 2025 EPSS Score
Nov 27, 2025 Coalition ESS Score
Nov 30, 2025 EPSS Score

References

Open in Interactive Console →