7.8 High

CVE-2024-47783 A vulnerability has been identified in SIPORT (All versions < V3.4.0)

Description

A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.

Affected products and versions

Product	Affected versions	Fixed in
SIPORT 3.4	earliest → < 3.4.0	3.4.0
siport_mp 3.4	earliest → < 3.4.0	3.4.0

References

cert-portal.siemens.com cert-portal.siemens.com

Timeline

Published November 12, 2024
Last modified November 12, 2024

The 3 CVEs of SIPORT →

CVE-2026-109619 RCE via stale global state 9.2 Critical CVE-2026-109618 RCE via OOM corruption 9.2 Critical

Track this CVE

CVE-2024-47783 A vulnerability has been identified in SIPORT (All versions < V3.4.0)

Description

Affected products and versions

References

Timeline

Other CVEs of SIPORT