PT-2018-2197 · Siemens · Sinumerik 808D+2

Published 2018-12-11 · Updated 2019-10-09 · CVE-2018-11461

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions SINUMERIK 808D V4.7 SINUMERIK 808D V4.8 SINUMERIK 828D versions prior to V4.7 SP6 HF1 SINUMERIK 840D sl versions prior to V4.7 SP6 HF5 SINUMERIK 840D sl versions prior to V4.8 SP3

Description A local attacker with user privileges could exploit this issue to escalate privileges to an elevated user, but not to the root level, by using the service command application. The vulnerability requires local access to the affected systems and user privileges, but no user interaction. Successful exploitation could compromise the confidentiality, integrity, and availability of the system. At the time of advisory publication, no public exploitation of this security issue was known.

Recommendations For SINUMERIK 808D V4.7, update to a version later than V4.7. For SINUMERIK 808D V4.8, update to a version later than V4.8 SP3. For SINUMERIK 828D, update to V4.7 SP6 HF1 or later. For SINUMERIK 840D sl V4.7, update to V4.7 SP6 HF5 or later. For SINUMERIK 840D sl V4.8, update to V4.8 SP3 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-00175

CVE-2018-11461

Affected Products

Sinumerik 808D

Sinumerik 828D

Sinumerik 840D Sl

References · 7

• https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11461 · Security Note
• https://osv.dev/vulnerability/CVE-2018-11461 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00175 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-345-02 · Note
• https://cert-portal.siemens.com/productcert/txt/ssa-170881.txt · Note
• http://securityfocus.com/bid/106185 · Note