Lucene search

K
cvelistSiemensCVELIST:CVE-2021-25659
HistoryAug 10, 2021 - 10:35 a.m.

CVE-2021-25659

2021-08-1010:35:25
CWE-400
siemens
www.cve.org
4
vulnerability
automation license manager
denial-of-service
memory consumption
port 4410/tcp

EPSS

0.001

Percentile

42.5%

A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2). Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a denial-of-service preventing legitimate users from using the system.

CNA Affected

[
  {
    "product": "Automation License Manager 5",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "Automation License Manager 6",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.0 SP9 Update 2"
      }
    ]
  }
]

EPSS

0.001

Percentile

42.5%

Related for CVELIST:CVE-2021-25659