Siemens SINUMERIK Systems
SINUMERIK systems, that have been provisioned with Create MyConfig (CMC), are affected by a Insertion of Sensitive Information into Log File vulnerability. When using a CMC package on a NCU or on an IPC the password used in the CMC package or typed in manually during package execution is traced on the machine to the file uptrace.out. This could allow a local authenticated user with low privileges to read that password and use it to impersonate a user with higher privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-43781US | — | — | ||
A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <… | ||||
references
External citations — patches, advisories, analysis.
- SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems - CSAF Versionself
- SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems - HTML Versionself
- ICS Advisory ICSA-24-256-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationSINUMERIK 828D V4
Delete the file(s) manually (after using CMC): - on an NCU: /card/user/sinumerik/hmi/log/sltrc/uptrace.out - on an IPC: c:\ProgramData\Siemens\MotionControl\user\sinumerik\hmi\log\sltrc\uptrace.out and the corresponding backup of the tracefile, uptrace.out.bak. Replace trace configuration to switch off trace for the future.
- MitigationSINUMERIK 840D sl V4
Delete the file(s) manually (after using CMC): - on an NCU: /card/user/sinumerik/hmi/log/sltrc/uptrace.out - on an IPC: c:\ProgramData\Siemens\MotionControl\user\sinumerik\hmi\log\sltrc\uptrace.out and the corresponding backup of the tracefile, uptrace.out.bak. Replace trace configuration to switch off trace for the future.
- MitigationSINUMERIK ONE
Delete the file(s) manually (after using CMC): - on an NCU: /card/user/sinumerik/hmi/log/sltrc/uptrace.out - on an IPC: c:\ProgramData\Siemens\MotionControl\user\sinumerik\hmi\log\sltrc\uptrace.out and the corresponding backup of the tracefile, uptrace.out.bak. Replace trace configuration to switch off trace for the future.
- FixedSINUMERIK 828D V4
Update to V4.95 SP3 or later version
- FixedSINUMERIK 840D sl V4
Update to V4.95 SP3 or later version
- FixedSINUMERIK ONE
Update to V6.15 SP4 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan