high7.8
CVE-2022-24408
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1).
Impact
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Sinumerik Mc Firmware | before 1.15 Version 1.15 |
| Siemens | Sinumerik One Firmware | before 6.15 Version 6.15 |