CVE-2024-32008
High · 7.8CVSS
7.8
EPSS
0.1%
Published
Nov 11, 2025
CISA due date
—
The record
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-54424 An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads… CWE-648
- CVE-2026-11877 An unauthorized user can modify configuration through API calls that affects the OpenText… CWE-648
- CVE-2026-9560 Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on… CWE-648
- CVE-2026-41225 A vulnerability exists in iControl REST where a highly privileged, authenticated attacker… CWE-648
- CVE-2026-41386 OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap… CWE-648
- CVE-2026-41329 OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to… CWE-648
- CVE-2026-35669 OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in… CWE-648
- CVE-2026-35663 OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing… CWE-648