What is CVE-2024-32011?

CVE-2024-32011 is a high-severity vulnerability in Siemens Spectrum Power 4, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 8.8/10. Published 2025-11-11.

How severe is CVE-2024-32011?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Siemens Spectrum Power 4

CVE-2024-32011

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Siemens Spectrum Power 4 — versions 0

Weakness classification (CWE)

CWE-829 — Inclusion of Functionality from Untrusted Control Sphere

References

productcert@siemens.com

Frequently asked questions

What is CVE-2024-32011?: CVE-2024-32011 is a high-severity vulnerability in Siemens Spectrum Power 4, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 8.8/10. Published 2025-11-11.
How severe is CVE-2024-32011?: High severity. CVSS v3 base score is 8.8 out of 10.