Denial of Service Vulnerability in Siemens Automation License Manager (CNVD-2021-05550)

Automation License Manager is an automation license manager. Automation License Manager has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

CVE-2020-7583

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

Design/Logic Flaw

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

CVE-2020-7583

CVE-2020-7583 affects Automation License Manager 5 (all versions) and ALM 6 (all versions before 6.0.8). The root cause is improper privilege validation in certain operations, enabling a user with low privileges to arbitrarily modify files protected from writing (local access). CVSS v3.1 base sco...

Siemens Automation License Manager 5.x < 6.0.8 Privilege Escalation (SSA-388646)

Binary data scadasiemensalmssa388646.nbin...

Siemens Automation License Manager

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Automation License Manager ALM Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to locally escalate privileges and modify...

Siemens Automation License Manager Detection (Windows SMB Login)

SMB login-based detection of Siemens Automation License Manager. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Directory traversal

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4, Automation License Manager 6 All versions 6.0.1. A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality,...

CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4. An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker t...

CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4. An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker t...

CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4, Automation License Manager 6 All versions 6.0.1. A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality,...

Design/Logic Flaw

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4. An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker t...

CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4, Automation License Manager 6 All versions 6.0.1. A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality,...

CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4. An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker t...

CVE-2018-11455

The vulnerability CVE-2018-11455 affects Siemens Automation License Manager: all versions of 5 before 5.3.4.4 and all versions of 6 before 6.0.1. It is a directory traversal flaw that could allow a remote attacker to move arbitrary files, potentially enabling code execution and impacting confiden...

CVE-2018-11456

Siemens Automation License Manager (ALM) 5.x prior to 5.3.4.4 contains a network-based information-disclosure/port-scanning flaw. An unauthenticated, remote attacker could send crafted packets to determine whether a remote port is reachable, enabling basic port discovery using the victim’s machin...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

CVE-2016-8564

Siemens Automation License Manager (ALM) is affected by CVE-2016-8564 through SQL injection in ALM before 5.3 SP3 Update 1. an attacker can send crafted traffic to port 4410/TCP to execute arbitrary SQL commands that may read or modify configuration data. The issue stems from improper handling of...

Siemens Automation License Manager suffers from a denial of service vulnerability (CNVD-2016-08772)

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A denial of service vulnerability exists in Siemens Automation License Manager. An attacker can exploit the vulnerability by sending specially crafted packets to port...