Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

SINUMERIK controllers let local user run code via config file

CVE-2018-11459 · published 7 years ago
Summary

Versions of the SINUMERIK 808D, 828D and 840D SL controllers can be tricked by a user who has local access to change a writable configuration file. When the system restarts or the file is reloaded, the altered file can cause the controller to execute the attacker’s code with higher privileges. Apply the latest firmware updates from the vendor to protect the machines.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
siemens sinumerik_808d_v4.7_firmware All versions
cpe:2.3:o:siemens:sinumerik_808d_v4.7_firmware:*:*:*:*:*:*:*:*
siemens sinumerik_808d_v4.8_firmware All versions
cpe:2.3:o:siemens:sinumerik_808d_v4.8_firmware:*:*:*:*:*:*:*:*
siemens sinumerik_828d_v4.7_firmware <= 4.7
cpe:2.3:o:siemens:sinumerik_828d_v4.7_firmware:*:*:*:*:*:*:*:*
siemens sinumerik_840d_sl_v4.7_firmware <= 4.7
cpe:2.3:o:siemens:sinumerik_840d_sl_v4.7_firmware:*:*:*:*:*:*:*:*
siemens sinumerik_840d_sl_v4.8_firmware <= 4.8
cpe:2.3:o:siemens:sinumerik_840d_sl_v4.8_firmware:*:*:*:*:*:*:*:*
Original advisory text
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All version...
A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A local attacker could modify a user-writeable configuration file so that after reboot or manual initiation the system reloads the modified configuration file and attacker-controlled code is executed with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-693Protection Mechanism Failure
Timeline
Published12 Dec 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-11459 · NVD
Track software like this
Free during beta