Siemens SINUMERIK MC
view advisory published 2022-03-08
The NC plug-in card in SINUMERIK MC contains a privilege escalation vulnerability that could allow local attackers to escalate their privileges to root. This allows full access to the device, including read and modifying G code. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24408US | high7.8 | — | ||
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several co… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-337210: Privilege Escalation Vulnerability in SINUMERIK MC - CSAF Versionself
- SSA-337210: Privilege Escalation Vulnerability in SINUMERIK MC - PDF Versionself
- SSA-337210: Privilege Escalation Vulnerability in SINUMERIK MC - TXT Versionself
- ICS Advisory ICSA-22-069-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-069-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedSINUMERIK MC
Update to V1.15 SP1 or laterj version
- FixedSINUMERIK ONE
Update to V6.15 SP1 or later version
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan