High severity7.8NVD Advisory· Published Mar 8, 2022· Updated Jun 17, 2026
CVE-2022-24408
CVE-2022-24408
Description
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.
Affected products
9cpe:2.3:o:siemens:sinumerik_mc_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:sinumerik_mc_firmware:*:*:*:*:*:*:*:*range: <1.15
- cpe:2.3:o:siemens:sinumerik_mc_firmware:1.15:-:*:*:*:*:*:*
cpe:2.3:o:siemens:sinumerik_one_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:sinumerik_one_firmware:*:*:*:*:*:*:*:*range: <6.15
- cpe:2.3:o:siemens:sinumerik_one_firmware:6.15:-:*:*:*:*:*:*
- Range: < V1.15 SP1
- Range: < V1.15 SP1
< V6.15 SP1+ 2 more
- (no CPE)range: < V6.15 SP1
- (no CPE)range: All versions < V1.15 SP1
- (no CPE)range: All versions < V6.15 SP1
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-337210.pdfnvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.