CNNVD-202511-1002 Information

CNNVD ID

CNNVD-202511-1002

CVE-2024-32008

  • CNNVD Published: 2025-11-11

Description (Chinese)

Siemens Spectrum Power是德国西门子(Siemens)公司的一套能源管理系统。 Siemens Spectrum Power 4 V4.70 SP12 Update 2之前版本存在安全漏洞,该漏洞源于本地主机上暴露的调试接口,可能导致本地权限提升。

Description (English)

Siemens Spectrum Power is an energy management system of Siemens, Germany. There is a security loophole in the pre-version of Siemens Spectrum Power 4 V4.70 SP12 Update 2, which originates from a debugging interface that is exposed on a local host and may lead to an increase in local privileges.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

西门子

Published

2025-11-11

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-339694.html https://access.redhat.com/security/cve/cve-2024-32008

Patch

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Share on: