← Database

CVE-2022-24408

HIGH CVSS: 7.8 Published: 2022-03-08 Modified: 2026-06-17

Description

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.

Affected Platforms

Siemens Sinumerik One FirmwareSiemens Sinumerik OneSiemens Sinumerik Mc FirmwareSiemens Sinumerik Mc

Weakness Type

CWE-269, CWE-269

References