Siemens SINUMERIK ONE

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

Published: 2023-12-12T11:27:10.086Z
Updated: 2026-02-25T16:34:35.639Z

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-21T13:47:33.635Z

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify system files. A specific set of operations using sc could allow local attackers to escalate their privileges to root.

Published: 2022-03-08T11:31:30.000Z
Updated: 2024-08-03T04:13:55.644Z

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Published: 2020-11-12T18:06:09.000Z
Updated: 2024-08-04T10:12:09.559Z

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Published: 2021-03-18T00:00:00.000Z
Updated: 2025-12-03T18:20:03.875Z