CVE-2016-8564

2016-10-1310:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.

References

www.securityfocus.com/bid/93553

www.securitytracker.com/id/1037011

www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf

ics-cert.us-cert.gov/advisories/ICSA-16-287-02