<p>SINUMERIK systems, that have been provisioned with Create MyConfig (CMC), are affected by a Insertion of Sensitive Information into Log File vulnerability. When using a CMC package on a NCU or on an IPC the password used in the CMC package or typed in manually during package execution is traced on the machine to the file <code>uptrace.out</code>. This could allow a local authenticated user with low privileges to read that password and use it to impersonate a user with higher privileges.</p>
<p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p>
Source link
