Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-43781

A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <= V4.8 SP1 HF6), SINUMERIK ONE (All versions < V6.23 in connection with using Create MyConfig (CMC) <= V6.6), SINUMERIK ONE (All versions < V6.15 SP4 in connection with using Create MyConfig (CMC) <= V6.6). Affected systems, that have been provisioned with Create MyConfig (CMC), contain a Insertion of Sensitive Information into Log File vulnerability. This could allow a local authenticated user with low privileges to read sensitive information and thus circumvent access restrictions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SINUMERIK 828D V4

Default version status: unknown

  • 0 to < V4.95 SP3affected

Siemens SINUMERIK 840D sl V4

Default version status: unknown

  • 0 to < V4.95 SP3affected

Siemens SINUMERIK ONE

Default version status: unknown

  • 0 to < V6.23affected

Siemens SINUMERIK ONE

Default version status: unknown

  • 0 to < V6.15 SP4affected

References