CVE-2023-46156

CVE-2023-46156 affects Siemens SINUMERIK MC/ONE and a broad range of SIMATIC S7-1500 CPU family devices, where port 102/tcp handling of specially crafted packets can trigger a denial-of-service. The vulnerability is described as a Use-After-Free (CWE-416) condition with a CVSS v3 base score of 7....

CVE-2022-24408

CVE-2022-24408 affects Siemens SINUMERIK MC (all versions prior to v1.15 SP1) and SINUMERIK ONE (all versions prior to v6.15 SP1). The issue is due to the sc SUID binary, which exposes commands that can be used to execute system commands or modify files; this leads to improper privilege managemen...