{"id":"CVE-2022-24408","aliases":["EUVD-2022-29300","GHSA-c7jg-mh9j-jjqx"],"status":"published","title":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE ...","description":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE (All versions \u003c V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0021,"percentile":0.11193,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2022-03-08T11:31:30Z","modified":"2026-06-17T04:31:47Z","products":[{"vendor":"siemens","product":"sinumerik mc"},{"vendor":"siemens","product":"sinumerik one"},{"vendor":"siemens","product":"sinumerik_mc_firmware"},{"vendor":"siemens","product":"sinumerik_one_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-337210.pdf","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24408"},{"url":"https://github.com/advisories/GHSA-c7jg-mh9j-jjqx"}],"sources":{"cve":[{"id":"CVE-2022-24408","description":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE (All versions \u003c V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.","status":"published","published":"2022-03-08T11:31:30Z","modified":"2024-08-03T04:13:55.644Z","cwes":["CWE-269"],"updated_at":"2026-11-02T14:34:34.576287Z"}],"euvd":[{"id":"EUVD-2022-29300","description":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE (All versions \u003c V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.","status":"published","published":"2022-03-08T11:31:30Z","modified":"2024-08-03T04:13:55Z","updated_at":"2026-11-03T03:25:48.993963Z"}],"ghsa":[{"id":"GHSA-c7jg-mh9j-jjqx","title":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE ...","description":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE (All versions \u003c V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files.\n\nA specific set of operations using sc could allow local attackers to escalate their privileges to root.","status":"published","published":"2022-03-09T00:00:45Z","modified":"2023-02-03T05:06:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:53:53.812094Z"}],"nvd":[{"id":"CVE-2022-24408","description":"A vulnerability has been identified in SINUMERIK MC (All versions \u003c V1.15 SP1), SINUMERIK ONE (All versions \u003c V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.","status":"published","published":"2022-03-08T12:15:11.627Z","modified":"2026-06-17T04:31:47.19Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:07:12.711288Z"}]}}