SINUMERIK ONE vulnerabilities

6 known vulnerabilities in SINUMERIK ONE from Siemens. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  SINUMERIK 828D PPU.4: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-40743Aug 12, 2025Siemens

  A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5), SINUMERIK MC (All versions < V1.25 SP1), SINUMERIK MC V1.15 (All versions < V

• 8.8 High severity

  SINUMERIK 828D V4: Incorrect Permission Assignment for Critical Resource

  CVE-2024-41171Sep 10, 2024Siemens

  A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected devices do not properly enforce access restrictions to script

• 8.1 High severity

  Red Hat Enterprise Linux 9: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2024-6387Jul 1, 2024Red HatEPSS 99.5%

  A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate

• 7.5 High severity

  SIMATIC Drive Controller CPU 1504D TF: Use After Free

  CVE-2023-46156Dec 12, 2023SiemensEPSS 1.24%

  Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

• 7.8 High severity

  SIMATIC Drive Controller family: Insufficiently Protected Credentials

  CVE-2022-38465Oct 11, 2022Siemens

  A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All

• 7.8 High severity

  SINUMERIK MC: Improper Privilege Management

  CVE-2022-24408Mar 8, 2022Siemens

  A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specif