CVE-2022-24408: High severity siemens sinumerik mc mcu 1720 vulnerability
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-24408?
CVE-2022-24408 is a vulnerability identified in SINUMERIK MC and SINUMERIK ONE that allows the execution of system commands or modification of system files.
How does CVE-2022-24408 impact affected devices?
CVE-2022-24408 impacts affected devices by providing several commands that can be used to execute system commands or modify system files.
Which versions of SINUMERIK MC are affected by CVE-2022-24408?
All versions of SINUMERIK MC < V1.15 SP1 are affected by CVE-2022-24408.
Which versions of SINUMERIK ONE are affected by CVE-2022-24408?
All versions of SINUMERIK ONE < V6.15 SP1 are affected by CVE-2022-24408.
What is the severity of CVE-2022-24408?
CVE-2022-24408 has a severity rating of 7.8 (high).
How can I fix CVE-2022-24408?
To fix CVE-2022-24408, it is recommended to update to SINUMERIK MC V1.15 SP1 or later and SINUMERIK ONE V6.15 SP1 or later.