High severity · published Sep 10, 2024
CVE-2024-41171
A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions…
8.8
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected devices do not properly enforce access restrictions to scripts that are regularly executed by the system with elevated privileges. This could allow an authenticated local attacker to escalate their privileges in the underlying system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S8
SINUMERIK 828D V4 · Siemens
0 · source: vendor
S8
SINUMERIK 828D V5 · Siemens
before V5.24 · source: vendor
S8
SINUMERIK 840D sl V4 · Siemens
0 · source: vendor
SO
SINUMERIK ONE · Siemens
before V6.24 · source: vendor
S8
Sinumerik 828d Firmware · Siemens
4.0 before 5.24 · source: CISA
S8
Sinumerik 840d SL Firmware · Siemens
4.0 · source: CISA
SO
Sinumerik One Firmware · Siemens
before 6.24 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-41171
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-41171
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-342438.html
More from SINUMERIK 828D V4
5.5
CVE-2024-43781
A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC)…