CVE-2022-24408CWE-269

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1)

published March 8, 2022

CVSS
—
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-03-08T11:31Z
EPSS history
Timeline
  • 08 MAR 11:31Z
    A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1)
    cvelistv5