Vulnerabilities

TI-2022-21296 CVE-2022-43514 · GHSA-9pw2-prwg-r2jf

Path traversal in Siemens Automation License Manager V5

MEDIUM 46

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01607 Published 2023-01-10 Fixed in V3.1.2 CWE-22

TI-2022-21295 CVE-2022-43513 · GHSA-3mf9-jjrh-xqv8

A vulnerability has been identified in Automation License Manager V5 (All versions)…

MEDIUM 44

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00992 Published 2023-01-10 Fixed in V3.1.2 CWE-73

TI-2021-07791 CVE-2021-25659 · GHSA-qhxf-2fw5-w33w

Uncontrolled resource consumption in Siemens Automation License Manager 5

LOW 35

A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01037 Published 2021-08-10 No fix listed CWE-400

TI-2020-06105 CVE-2020-7583 · GHSA-5jq7-2p53-83g6

Improper authorization in Siemens Automation License Manager 5

LOW 34

A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00268 Published 2020-08-14 Fixed in V6.0.8 CWE-285

TI-2018-08181 CVE-2018-11456 · GHSA-qwxx-q8h8-xx3q

Improper access control in Siemens Automation License Manager 5

LOW 29

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4).

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01257 Published 2018-08-07 No fix listed CWE-284

TI-2018-08180 CVE-2018-11455 · GHSA-q23v-cmj9-h93q

Path traversal in Siemens Automation License Manager 5, Automation License Manager 6

MEDIUM 46

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1).

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.05239 Published 2018-08-07 No fix listed CWE-22

TI-2016-07037 CVE-2016-8565 · GHSA-ggh9-7q27-c7v4

Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write…

MEDIUM 45

Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02909 Published 2016-10-13 No fix listed CWE-284

TI-2016-07036 CVE-2016-8564 · GHSA-pp9j-r5qv-wgcj

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3…

LOW 31

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.01142 Published 2016-10-13 No fix listed CWE-89

TI-2016-07035 CVE-2016-8563 · GHSA-q9gx-mx48-xpg2

Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers…

LOW 38

Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02993 Published 2016-10-13 No fix listed CWE-20

TI-2012-03999 CVE-2012-4691 · GHSA-3g8v-fw4m-xm3p

Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows…

LOW 18

Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.00892 Published 2012-12-18 No fix listed CWE-399

TI-2011-03903 CVE-2011-4532 · GHSA-44rr-xjrr-2j22

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in…

LOW 29

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attac…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03214 Published 2012-01-08 No fix listed CWE-22

TI-2011-03902 CVE-2011-4531 · GHSA-px66-m46c-vmhx

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers…

LOW 34

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2)…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08406 Published 2012-01-08 No fix listed CWE-20

TI-2011-03901 CVE-2011-4530 · GHSA-9wc8-4g2q-8xv5

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy…

LOW 30

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fiel…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0408 Published 2012-01-08 No fix listed CWE-20

TI-2011-03900 CVE-2011-4529 · GHSA-5f2r-rx93-xgcp

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through…

MEDIUM 43

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06856 Published 2012-01-08 No fix listed CWE-119

Vulnerabilities

Filters