CNNVD-202511-1001 Information

CNNVD ID

CNNVD-202511-1001

CVE-2024-32009

  • CNNVD Published: 2025-11-11

Description (Chinese)

Siemens Spectrum Power是德国西门子(Siemens)公司的一套能源管理系统。 Siemens Spectrum Power V4.70 SP12 Update 2之前版本存在安全漏洞,该漏洞源于二进制文件权限设置不当,可能导致本地权限提升。

Description (English)

Siemens Spectrum Power is an energy management system of Siemens, Germany. Siemens Spectrum Power V4.70 SP12 Update 2 had a security loophole, which stemmed from the inappropriate setting of binary file permissions, which could lead to an increase in local privileges.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

西门子

Published

2025-11-11

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-339694.html https://access.redhat.com/security/cve/cve-2024-32009

Patch

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Share on: