Siemens Sinumerik One Firmware vulnerabilities

6 CVEs affecting Siemens Sinumerik One Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41171, published 2024-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27827, published 2021-03-18. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of…
CVE-2023-46156, published 2023-12-12. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal…
CVE-2020-8745, published 2020-11-12. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80…
CVE-2022-30694, published 2022-11-08. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login…
CVE-2022-24408, published 2022-03-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are…
CVE-2024-41171, published 2024-09-10. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUMERIK 840D sl V4 (All versions), SINUMERIK ONE (All versions < V6.24). Affected…