SSA-342438 — Vulnetix

SSA-342438 PUBLISHED CVSS 8.800000190734863 HIGH

SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Risk Scores

CVSS v3.1

8.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected Products

Vendor	Product	Versions
	SINUMERIK ONE
	SINUMERIK 840D sl V4
	SINUMERIK 828D V4
	SINUMERIK 828D V5

Timeline

CVE Published

References

https://cert-portal.siemens.com/productcert/html/ssa-342438.html advisory
https://cert-portal.siemens.com/productcert/csaf/ssa-342438.json advisory

Open in Interactive Console →