Security Advisory

CVE-2022-24408

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-08 11:31:30

Last updated 2024-08-03 04:13:55

Assigner siemens

CVSS score not scored

State PUBLISHED

Description

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.

← Browse all CVEs View on cve.org ↗