CVE-2018-11455
High
Description
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality, integrity and availability of the system. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or special conditions of the system, but user interaction is required.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSiemens Automation License Manager
PublishedAug 7, 2018
First seenAug 7, 2018
Weakness typeCWE-22Path traversal
How to fix
Update
- siemens automation_license_manager5.3.4.4, 6.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens automation_license_manager | 5.0 < v < 5.3.4.4, 6.0 ≤ v < 6.0.1 | 5.3.4.4, 6.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.