CVE-2024-32010

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

• CWE-732

• https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Published

Nov 11, 2025

Last Modified

Sep 26, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32005NiceGUI is an easy-to-use, Python-based UI framework. A loca…8.2
• CVE-2024-32006A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2024-32007An improper input validation of the p2c parameter in the Apa…7.5
• CVE-2024-32008A vulnerability has been identified in Spectrum Power 4 (All…7.8
• CVE-2024-32009A vulnerability has been identified in Spectrum Power 4 (All…7.8
• CVE-2024-3201The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable…6.4
• CVE-2024-32011A vulnerability has been identified in Spectrum Power 4 (All…8.8
• CVE-2024-32014A vulnerability has been identified in Spectrum Power 4 (All…4.7
• CVE-2024-32017RIOT is a real-time multi-threading operating system that su…9
• CVE-2024-32018RIOT is a real-time multi-threading operating system that su…9
• CVE-2024-32019Netdata is an open source observability tool. In affected ve…8.8
• CVE-2024-3202A vulnerability, which was classified as problematic, has be…5.9