Advisories · Technology
Siemens SINUMERIK ONE.
Every CVE that names Siemens SINUMERIK ONE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Authentication bypass in Siemens SINUMERIK 828D PPU.4 and others
- Siemens SINUMERIK 828D PPU.4
- Siemens SINUMERIK 828D PPU.5
- Authentication bypass
- CVSS 6.8 Medium
Sensitive information in log files in Siemens SINUMERIK 828D V4 and others
- Siemens SINUMERIK 828D V4
- Siemens SINUMERIK 840D sl V4
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Incorrect permission assignment in Siemens SINUMERIK 828D V4 and others
- Siemens SINUMERIK 828D V4
- Siemens SINUMERIK 828D V5
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Hard-coded credentials
-
Improper privilege management in Siemens SINUMERIK MC and others
- Siemens SINUMERIK MC
- Siemens SINUMERIK ONE
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Siemens SIMATIC Drive Controller family and others
- Siemens SIMATIC Drive Controller family
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- Memory corruption