CVE-2024-32009CWE-266

CVE-2024-32009

High · published November 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

⚡ A sneaky misconfiguration opens the door wide! A local attacker can exploit Spectrum Power 4 (versions < V4.70 SP12 Update 2) to gain administrative privileges with ease! 🔥 Think of this like a restaurant where anyone can waltz into the kitchen because the back door is propped open. Without proper checks, the wannabe chef can take charge and whip up anything they want, even changing the menu to something unsavory! This vulnerability could lead to a local attacker seizing control of the system, allowing them to access sensitive data, modify critical configurations, or even disrupt services. Imagine an intruder in a control room, manipulating everything at will — absolutely devastating!

Put simply

Think of this like a restaurant where anyone can waltz into the kitchen because the back door is propped open. Without proper checks, the wannabe chef can take charge and whip up anything they want, even changing the menu to something unsavory! Due to improperly set permissions on a specific binary, any local user can elevate their privileges to admin status, undermining the security of the entire application.

What to do

This vulnerability could lead to a local attacker seizing control of the system, allowing them to access sensitive data, modify critical configurations, or even disrupt services. Imagine an intruder in a control room, manipulating everything at will — absolutely devastating! To protect yourself, immediately update Spectrum Power to version V4.70 SP12 Update 2 or later. Additionally, review and tighten permissions on sensitive binaries to ensure local users cannot gain unintended access. Don’t forget to audit user roles and permissions! You’ve got this! By taking these steps, you’ll be a security hero ensuring your system is safe from sneaky privilege escalations! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-11-12T02:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 20:20Z
    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)
    cvelistv5