Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-41171

A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected devices do not properly enforce access restrictions to scripts that are regularly executed by the system with elevated privileges. This could allow an authenticated local attacker to escalate their privileges in the underlying system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SINUMERIK 828D V4

Default version status: unknown

  • 0 to < *affected

Siemens SINUMERIK 828D V5

Default version status: unknown

  • 0 to < V5.24affected

Siemens SINUMERIK 840D sl V4

Default version status: unknown

  • 0 to < *affected

Siemens SINUMERIK ONE

Default version status: unknown

  • 0 to < V6.24affected

References