CVE Feed

    Dashboard / CVE / CVE-2024-41171

    CVE-2024-41171

    A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected devices do not properly enforce access restrictions to scripts that are regularly executed by the system with elevated privileges. This could allow an authenticated local attacker to escalate their privileges in the underlying system.

    Published:Sep 10, 2024
    Last Modified:Apr 15, 2026
    EPS:Sep 10, 2024
    EPSS Score:0.00044
    CVSS Score:8.8

    Affected Products

    Vendor
    Siemens
    Product
    Sinumerik 828d Firmware
    Vendor
    Siemens
    Product
    Sinumerik 840d Sl Firmware
    Vendor
    Siemens
    Product
    Sinumerik One Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High