Read the docs
TI-2022-21295 Aliases CVE-2022-43513GHSA-3mf9-jjrh-xqv8

A vulnerability has been identified in Automation License Manager V5 (All versions)…

Priority MEDIUM 44CWE-73Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected components allow to rename license files with user chosen input without authentication. This could allow an unauthenticated remote attacker to rename and move files as SYSTEM user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00992 62nd percentileScored 2026-11-07
Fix Fixed TeleControl Server Basic V3 (Siemens): V3.1.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensAutomation License Manager V5all versions—No fix listedCNA
SiemensAutomation License Manager V6All versions < V6.0 SP9 Upd4—No fix listedCNA
SiemensTeleControl Server Basic V3before V3.1.2V3.1.2Patch availableCNA
  • Automation License Manager V5 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • Automation License Manager V6 VendorSiemens Affected All versions < V6.0 SP9 Upd4 Fixed in — No fix listed CNA
  • TeleControl Server Basic V3 VendorSiemens Affected before V3.1.2 Fixed in V3.1.2 Patch available CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:siemens:automation_license_manager:5.0.0:*:*:*:*:*:*:*5.0.0VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:5.1:*:*:*:*:*:*:*5.1VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:5.1:sp1:*:*:*:*:*:*5.1 sp1VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:5.2:*:*:*:*:*:*:*5.2VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:5.3:*:*:*:*:*:*:*5.3VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:5.3:sp3:*:*:*:*:*:*5.3 sp3VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:5.3.4.4:*:*:*:*:*:*:*5.3.4.4VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:6.0:*:*:*:*:*:*:*6.0VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:6.0.1:*:*:*:*:*:*:*6.0.1VulnerableSiemens
cpe:2.3:a:siemens:automation_license_manager:6.0.8:*:*:*:*:*:*:*6.0.8VulnerableSiemens
  • cpe:2.3:a:siemens:automation_license_manager:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:5.1:sp1:*:*:*:*:*:* Versions 5.1 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:5.3:sp3:*:*:*:*:*:* Versions 5.3 sp3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:5.3.4.4:*:*:*:*:*:*:* Versions 5.3.4.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:automation_license_manager:6.0.8:*:*:*:*:*:*:* Versions 6.0.8 Vulnerable ·Siemens
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:siemens:automation_license_manager:6.0.9:*:*:*:*:*:*:*6.0.9VulnerableSiemens
  • cpe:2.3:a:siemens:automation_license_manager:6.0.9:*:*:*:*:*:*:* Versions 6.0.9 Vulnerable ·Siemens

Remediation

  • Fix · CNA TeleControl Server Basic V3 (Siemens) Fixed in V3.1.2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Siemens TeleControl Server Basic V3 V3.1.2

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2022-21296 Path traversal in Siemens Automation License Manager V5Priority MEDIUM 46
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-43513
  2. 2026-10-03 Alias added: GHSA-3mf9-jjrh-xqv8

References

Advisory 1

Other 2

  • TI-2022-21296 Path traversal in Siemens Automation License Manager V5 CVSS 3.1CRITICAL 9.8
  • TI-2018-08180 Path traversal in Siemens Automation License Manager 5, Automation License Manager 6 CVSS 3.0HIGH 8.8
  • TI-2016-07037 Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write… CVSS 3.0CRITICAL 9.1
  • TI-2011-03900 Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through… CVSS 2.0HIGH 7.5
  • TI-2016-07035 Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers… CVSS 3.0HIGH 7.5
  • TI-2021-07791 Uncontrolled resource consumption in Siemens Automation License Manager 5 CVSS 3.1HIGH 7.5
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences