PT-2025-46536 · Schneider Electric · Spectrum Power 4

Published 2025-11-11 · Updated 2025-11-11 · CVE-2024-32011

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Spectrum Power 4 versions prior to 4.70 SP12 Update 2

Description The application is susceptible to arbitrary command execution through the user interface. This interface is accessible over the network, enabling command execution with administrative application user privileges.

Recommendations Update to version 4.70 SP12 Update 2 or later.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

BDU:2025-14345

CVE-2024-32011

Affected Products

Spectrum Power 4

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-32011 · Security Note
• https://bdu.fstec.ru/vul/2025-14345 · Security Note
• https://twitter.com/CVEnew/status/1988348967973703911 · Twitter Post
• https://t.me/CVEtracker/37080 · Telegram Post
• https://twitter.com/CveFindCom/status/1988361233511198728 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-339694.html · Note