Description
A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SINUMERIK MC | All versions < V1.15 SP1 | — |
| Siemens | SINUMERIK ONE | All versions < V6.15 SP1 | — |
Advisories 2
- ICSA-22-069-11 Siemens SINUMERIK MC CISA ICS & IT advisories · May 6, 2025
- SSA-337210 SSA-337210: Privilege Escalation Vulnerability in SINUMERIK MC Siemens ProductCERT · Mar 8, 2022