CVE-2024-32011CWE-829

CVE-2024-32011

High · published November 12, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

⚡ A sneaky flaw in Spectrum Power 4 lets attackers run commands as if they were the admin, all through the user interface! Think of it like a restaurant where anyone can walk in and shout orders straight to the kitchen, bypassing the staff completely — chaos ensues! 🍽️ An attacker could gain full control over the application, leading to the execution of arbitrary commands that can manipulate or destroy critical system functions. This could result in unauthorized access to sensitive data or even a complete system takeover! Absolutely devastating!

Put simply

Think of it like a restaurant where anyone can walk in and shout orders straight to the kitchen, bypassing the staff completely — chaos ensues! 🍽️ This vulnerability allows attackers to exploit the user interface of Spectrum Power 4 to execute arbitrary commands with administrative privileges, due to insufficient input validation and access controls.

What to do

An attacker could gain full control over the application, leading to the execution of arbitrary commands that can manipulate or destroy critical system functions. This could result in unauthorized access to sensitive data or even a complete system takeover! Absolutely devastating! To secure your systems, update Spectrum Power 4 to version 4.70 SP12 Update 2 or later immediately. Additionally, review user permissions and implement stricter access controls to mitigate risks. Don't wait — act now! You've got this! Follow these steps and you’ll have your application secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Weakness
CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published
2025-11-12T02:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 20:20Z
    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)
    cvelistv5