Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41171US | — | — | ||
A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-342438: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D - CSAF Versionself
- SSA-342438: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D - HTML Versionself
- ICS Advisory ICSA-24-256-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- No fix plannedSINUMERIK 828D V4
Currently no fix is planned
- No fix plannedSINUMERIK 840D sl V4
Currently no fix is planned
- FixedSINUMERIK 828D V5
Update to V5.24 or later version
- FixedSINUMERIK ONE
Update to V6.24 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan