CVE-2018-11459

Siemens SINUMERIK controllers are affected: SINUMERIK 808D v4.7/all versions and v4.8, SINUMERIK 828D v4.7, and SINUMERIK 840D sl v4.7/v4.8 (specific sub-versions). Root cause: attacker-modifiable, user-writeable configuration files can be reloaded after reboot or manual start, causing attacker-c...

CVE-2018-11463

CVE-2018-11463 affects SINUMERIK 808D (v4.7/v4.8), SINUMERIK 828D (v4.7 before SP6 HF1), and SINUMERIK 840D sl (v4.7 before SP6 HF5, v4.8 before SP3). The issue is a stack-based buffer overflow in the service command application, enabling a local attacker with existing user privileges to execute ...

CVE-2018-11465

Siemens SINUMERIK controllers (808D, 828D, 840D sl) running affected V4.x are vulnerable to CVE-2018-11465 via ioctl abuse that can cause out-of-bounds reads, arbitrary writes, or kernel-mode code execution. Affected: 808D v4.7/v4.8 (all before certain SPs), 828D v4.7 (all before v4.7 SP6 HF1), 8...

CVE-2017-6865

CVE-2017-6865 is a DoS vulnerability in Siemens PROFINET DCP handling affecting multiple Siemens products (WinCC, STEP 7/TIA Portal, PCS 7, WinAC/WinCC flexible, SCT, SINEMA, SINUMERIK, etc.). The root cause is improper input validation, where specially crafted PROFINET DCP broadcast packets on a...