Privilege Escalation Vulnerability in SINUMERIK by Siemens

CVE-2022-24408

What is CVE-2022-24408?

A security weakness exists in the SINUMERIK MC and SINUMERIK ONE products where a SUID binary named 'sc' allows local attackers to execute system commands or alter system files. By manipulating this binary, attackers could potentially gain elevated root privileges, compromising the integrity and security of the affected systems. This vulnerability underscores the importance of maintaining updated software versions to mitigate risks associated with privilege escalation.

References