Not rated
CVE-2022-24408 A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1)
Description
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SINUMERIK MC | Versions not published | |
| SINUMERIK ONE | Versions not published |
Other CVEs of SINUMERIK MC
The 6 CVEs of SINUMERIK MC →
CVE-2025-40743
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All…
8.3
High
CVE-2023-46156
Affected devices improperly handle specially crafted packets sent to port 102/tcp
7.5
High
CVE-2023-28831
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could…
7.5
High
CVE-2022-38465
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open…
9.3
Critical