Privilege escalation via exposed localhost debug interface

Local privilege escalation in Siemens Spectrum Power 4 before V4.70 SP12 Update 2 allows local users to execute code as an application administrator. The localhost debug interface exposes privileged application operations to low-privileged local accounts. An existing local account is required; successful exploitation grants code execution in the administrative application context, not operating-system administrator access.