Vulnerability · Published Nov 11, 2025 · Assigned by siemens
CVE-2024-32011
High 8.8
In plain English
A high-severity security flaw in Spectrum Power 4 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 63.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Spectrum Power 4 | 0 – before V4.70 SP12 Update 2 |
Weakness: CWE-829 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H