Sinumerik One Firmware vulnerabilities

2 known vulnerabilities in Sinumerik One Firmware from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SINUMERIK 828D V4: Incorrect Permission Assignment for Critical Resource

  CVE-2024-41171Sep 10, 2024Siemens

  A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected devices do not properly enforce access restrictions to script

• 7.8 High severity

  SINUMERIK MC: Improper Privilege Management

  CVE-2022-24408Mar 8, 2022Siemens

  A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specif