Skip to content
5.5 Medium

CVE-2024-43781 A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All…

Description

A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <= V4.8 SP1 HF6), SINUMERIK ONE (All versions < V6.23 in connection with using Create MyConfig (CMC) <= V6.6), SINUMERIK ONE (All versions < V6.15 SP4 in connection with using Create MyConfig (CMC) <= V6.6). Affected systems, that have been provisioned with Create MyConfig (CMC), contain a Insertion of Sensitive Information into Log File vulnerability. This could allow a local authenticated user with low privileges to read sensitive information and thus circumvent access restrictions.

Affected products and versions

Product Affected versions Fixed in
SINUMERIK 828D V4 Versions not published
SINUMERIK 840D sl V4 Versions not published
SINUMERIK ONE Versions not published

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of SINUMERIK 828D V4 →
Track this CVE