Non notée
CVE-2022-24408 A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1)
Description
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINUMERIK MC | Versions non publiées | |
| SINUMERIK ONE | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SINUMERIK MC
Les 6 CVE de SINUMERIK MC →
CVE-2025-40743
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All…
8.3
Élevée
CVE-2023-46156
Affected devices improperly handle specially crafted packets sent to port 102/tcp
7.5
Élevée
CVE-2023-28831
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could…
7.5
Élevée
CVE-2022-38465
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open…
9.3
Critique