Memory Protection Bypass Vulnerability in SINUMERIK ONE and SINUMERIK MC

An attacker could write malicious code to the controller's protected memory or read sensitive data, potentially taking control of the CNC machine or stealing confidential manufacturing data. This could halt production or compromise your manufacturing operations.

Operators of Siemens CNC machines using SINUMERIK ONE or SINUMERIK MC controllers (versions before 6.15) should prioritize this fix. This affects manufacturers in automotive, aerospace, and general machine tool operations where these controllers are used for precision machining and process control.

An attacker with network access to the SINUMERIK ONE or SINUMERIK MC controller could send specially crafted network traffic to trigger the memory protection bypass. Once exploited, the attacker gains the ability to write arbitrary code to protected memory areas, allowing them to modify machine behavior or read sensitive manufacturing parameters.