9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Automation License Manager (ALM) centrally manages the license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for this software, the software can be used according to the end user license agreement.A path traversal vulnerability exists in Siemens Automation License Manager, which can be exploited by an unauthenticated remote attacker to perform file operations on files outside of the specified root folder.