Siemens Automation License Manager 5.x < 6.0.8 Privilege Escalation (SSA-388646)

The version of Siemens Automation License Manager installed on the remote host is version 5.x prior to 6.0.8. It is, therefore, affected by a privilege escalation vulnerability due to improper validation of user privileges when executing some operations. An authenticated, local attacker could exploit this issue to modify arbitrary files that should be protected against writing.

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.