675 matches found
Siemens Automation License Manager
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
PT-2023-1360 · Unknown · Telecontrol Server Basic V3 +2
Name of the Vulnerable Software and Affected Versions: Automation License Manager V5 All versions Automation License Manager V6 All versions prior to V6.0 SP9 Upd4 TeleControl Server Basic V3 All versions prior to V3.1.2 Description: The issue is related to a path traversal vulnerability. It may...
Vulnerabilities fixed in Siemens products
Siemens has fixed vulnerabilities in SINEC INS, among others, SIMATIC, SINUMERIK, SIMOCODE, SIRPLUS, SCALANCE, JT Open, JT Utilities, Solid Edge, Automation License Manager, Mendix and RUGGEDCOM. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in t...
PT-2023-1361 · Unknown · Telecontrol Server Basic V3 +2
Name of the Vulnerable Software and Affected Versions: Automation License Manager V5 All versions Automation License Manager V6 versions prior to V6.0 SP9 Upd4 TeleControl Server Basic V3 versions prior to V3.1.2 Description: A vulnerability has been identified that allows an unauthenticated remo...
Siemens Automation License Manager 路径遍历漏洞
The Automation License Manager ALM centrally manages license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for the software, the software can be used according to the end-us...
Siemens Automation License Manager 安全漏洞
The Automation License Manager ALM centrally manages license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for the software, the software can be used according to the end-us...
CVE-2022-26239
The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
CVE-2022-26239
The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
Default credentials
The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
PT-2022-17734 · Beckman Coulter · Remisol Advance
Name of the Vulnerable Software and Affected Versions: Beckman Coulter Remisol Advance versions 2.0.12.1 and prior Description: The default privileges for the running service Normand License Manager allow unprivileged users to overwrite and manipulate executables and libraries, enabling attackers...
CVE-2022-26239
The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data...
Beckman Coulter Remisol Advance 安全漏洞
Beckman Coulter Remisol Advance is a leading middleware solution for clinical laboratories, bridging laboratory information systems LIS and instrumentation from Beckman Coulter, Inc. A security vulnerability exists in Beckman Coulter Remisol Advance v2.0.12.1 and prior versions, which stems from...
CVE-2022-38129
A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method in the Keysight Sensor Management Server SMS. This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host...
Keysight Technologies Sensor Management Server 路径遍历漏洞
Keysight Technologies Sensor Management Server is a sensor management server from Keysight Technologies, USA. A security vulnerability exists in Keysight Technologies Sensor Management Server SMS, which stems from its com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method that allow...
Snow License Manager 代码问题漏洞
Snow License Manager SLM is the central hub of Snow's Snow Software Asset Management platform. A security vulnerability exists in Snow License Manager versions 9.xx through prior to 9.20.1 that stems from a security issue related to Windows Unquoted/Trusted service paths...
CVE-2022-29081
Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...
WordPress Plugin CalderaWP License Manager Cross-Site Request Forgery Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin CalderaWP License Manager version...
CVE-2021-36914
Cross-Site Request Forgery CSRF vulnerability leading to Reflected Cross-Site Scripting XSS in CalderaWP License Manager WordPress plugin = 1.2.11...