CVE-2018-11459: High severity siemens sinumerik 808d firmware vulnerability
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A local attacker could modify a user-writeable configuration file so that after reboot or manual initiation the system reloads the modified configuration file and attacker-controlled code is executed with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11459?
CVE-2018-11459 has been classified with a high severity level due to the potential for local attackers to exploit the vulnerability.
How do I fix CVE-2018-11459?
To remediate CVE-2018-11459, users should upgrade to the latest versions of the affected SINUMERIK firmware which include their security patches.
Which SINUMERIK versions are affected by CVE-2018-11459?
CVE-2018-11459 affects various versions of SINUMERIK 808D, 828D, and 840D sl firmware, with specific version limitations noted.
Who can be affected by CVE-2018-11459?
CVE-2018-11459 primarily impacts organizations and individuals using older versions of SINUMERIK control systems that have not applied the necessary updates.
What is the impact of CVE-2018-11459 if exploited?
If exploited, CVE-2018-11459 could allow a local attacker to modify system settings, leading to potential operational disruptions.