CVE-2022-24408

Name of the Vulnerable Software and Affected Versions SINUMERIK MC versions prior to V1.15 SP1 SINUMERIK ONE versions prior to V6.15 SP1

Description A vulnerability has been identified that could allow local attackers to escalate their privileges to root. The sc SUID binary on affected devices provides several commands that can be used to execute system commands or modify system files. A specific set of operations using sc could be exploited for this purpose.

Recommendations For SINUMERIK MC versions prior to V1.15 SP1, update to V1.15 SP1 or later to resolve the issue. For SINUMERIK ONE versions prior to V6.15 SP1, update to V6.15 SP1 or later to resolve the issue.