← CVE Tracker
7.8HIGH

CVE-2024-32010 — A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).

Unknown · Unknown · Published 11 Nov 2025 · Modified 26 Sept 2026

Description

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

References

What to do
  1. Check whether Unknown is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2024-32010