Veille CVE

Recherche « Siemens Spectrum Power 4 »

4 CVE

Critique 0 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Siemens Spectrum Power 4 » ✕
  1. CVE-2024-32011 8.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

  2. CVE-2024-32010 7.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

  3. CVE-2024-32009 7.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges.

  4. CVE-2024-32008 7.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.