Read the docs
TI-2024-29376 Aliases CVE-2024-43781GHSA-g75j-c66m-v892

Sensitive information in log files in Siemens SINUMERIK 828D V4

Priority LOW 29CWE-532Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-532.

Summary

A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions < V4.95 SP3 in connection with using Create MyConfig (CMC) <= V4.8 SP1 HF6), SINUMERIK ONE (All versions < V6.23 in connection with using Create MyConfig (CMC) <= V6.6), SINUMERIK ONE (All versions < V6.15 SP4 in connection with using Create MyConfig (CMC) <= V6.6). Affected systems, that have been provisioned with Create MyConfig (CMC), contain a Insertion of Sensitive Information into Log File vulnerability. This could allow a local authenticated user with low privileges to read sensitive information and thus circumvent access restrictions.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00155 4th percentileScored 2026-11-07
Fix Fixed SINUMERIK 828D V4 (Siemens): V4.95 SP3SINUMERIK 840D sl V4 (Siemens): V4.95 SP3+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSINUMERIK 828D V4before V4.95 SP3V4.95 SP3Patch availableCNA
SiemensSINUMERIK 840D sl V4before V4.95 SP3V4.95 SP3Patch availableCNA
SiemensSINUMERIK ONEbefore V6.23V6.23Patch availableCNA
SiemensSINUMERIK ONEbefore V6.15 SP4V6.15 SP4Patch availableCNA
  • SINUMERIK 828D V4 VendorSiemens Affected before V4.95 SP3 Fixed in V4.95 SP3 Patch available CNA
  • SINUMERIK 840D sl V4 VendorSiemens Affected before V4.95 SP3 Fixed in V4.95 SP3 Patch available CNA
  • SINUMERIK ONE VendorSiemens Affected before V6.23 Fixed in V6.23 Patch available CNA
  • SINUMERIK ONE VendorSiemens Affected before V6.15 SP4 Fixed in V6.15 SP4 Patch available CNA

Remediation

  • Fix · CNA SINUMERIK 828D V4 (Siemens) Fixed in V4.95 SP3
  • Fix · CNA SINUMERIK 840D sl V4 (Siemens) Fixed in V4.95 SP3
  • Fix · CNA SINUMERIK ONE (Siemens) Fixed in V6.23
  • Fix · CNA SINUMERIK ONE (Siemens) Fixed in V6.15 SP4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-43781
  2. 2026-10-03 Alias added: GHSA-g75j-c66m-v892

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences