Siemens SINUMERIK Systems
SINUMERIK systems, that have been provisioned with Create MyConfig (CMC), are affected by a Insertion of Sensitive Information into Log File vulnerability. When using a CMC package on a NCU or on an IPC the password used in the CMC package or typed in manually during package execution is traced on the machine to the file uptrace.out. This could allow a local authenticated user with low privileges to read that password and use it to impersonate a user with higher privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-43781US | — | — | ||
A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems - CSAF Versionself
- SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems - HTML Versionself
- ICS Advisory ICSA-24-256-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationSINUMERIK 828D V4
Delete the file(s) manually (after using CMC): - on an NCU: /card/user/sinumerik/hmi/log/sltrc/uptrace.out - on an IPC: c:\ProgramData\Siemens\MotionControl\user\sinumerik\hmi\log\sltrc\uptrace.out and the corresponding backup of the tracefile, uptrace.out.bak. Replace trace configuration to switch off trace for the future.
- MitigationSINUMERIK 840D sl V4
Delete the file(s) manually (after using CMC): - on an NCU: /card/user/sinumerik/hmi/log/sltrc/uptrace.out - on an IPC: c:\ProgramData\Siemens\MotionControl\user\sinumerik\hmi\log\sltrc\uptrace.out and the corresponding backup of the tracefile, uptrace.out.bak. Replace trace configuration to switch off trace for the future.
- MitigationSINUMERIK ONE
Delete the file(s) manually (after using CMC): - on an NCU: /card/user/sinumerik/hmi/log/sltrc/uptrace.out - on an IPC: c:\ProgramData\Siemens\MotionControl\user\sinumerik\hmi\log\sltrc\uptrace.out and the corresponding backup of the tracefile, uptrace.out.bak. Replace trace configuration to switch off trace for the future.
- BehobenSINUMERIK 828D V4
Update to V4.95 SP3 or later version
- BehobenSINUMERIK 840D sl V4
Update to V4.95 SP3 or later version
- BehobenSINUMERIK ONE
Update to V6.15 SP4 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan