CVE-2021-25659

Siemens Automation License Manager (ALM) 5 (all versions) and ALM 6 (all versions before v6.0 SP9 Update 2) are affected by CVE-2021-25659. The issue is uncontrolled resource consumption: sending crafted packets to TCP port 4410 can exhaust memory and cause DoS, hindering legitimate users. A reme...

CVE-2021-25659

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

Siemens Automation License Manager 资源管理错误漏洞

Siemens Automation License Manager centrally manages license keys for various Siemens software products. A denial of service vulnerability exists in Siemens Automation License Manager because sending carefully crafted packets to port 4410/tcp on an affected system could consume a large amount of...

PT-2021-16734

Name of the Vulnerable Software and Affected Versions Automation License Manager 5 All versions Automation License Manager 6 versions prior to V6.0 SP9 Update 2 Description A vulnerability has been identified that could lead to a denial-of-service, preventing legitimate users from using the syste...

CVE-2021-25659: Uncontrolled Resource Consumption

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0 SP9 Update 2. Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a...

Siemens Automation License Manager

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Automation License Manager Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition, preventing legitimate...

CVE-2021-20782

Cross-site request forgery CSRF vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20782

Cross-site request forgery CSRF vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20782

CVE-2021-20782 affects the WordPress plugin Software License Manager prior to version 4.4.6. The issue is a Cross-site Request Forgery (CSRF) vulnerability that could allow remote attackers to hijack administrator authentication via unspecified vectors. The root cause is CSRF in the plugin, with ...

CVE-2021-20782

Cross-site request forgery CSRF vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2021-14237

Name of the Vulnerable Software and Affected Versions: Software License Manager versions prior to 4.4.6 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. This can lead to unauthorized access and...

CVE-2021-20782: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Wordpress Software License Manager Cross-Site Request Forgery Vulnerability

Software License Manager is a Wordpress plugin that is vulnerable to cross-site request forgery, which could be exploited to hijack administrator authentication via an unspecified vector...

WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery

Overview WordPress Plugin "Software License Manager" provided by Tips and Tricks HQ contains a cross-site request forgery vulnerability CWE-352. Koken Tokuda of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University. reported this vulnerability to...

JVN#89054582: WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery

WordPress Plugin "Software License Manager" provided by Tips and Tricks HQ contains a cross-site request forgery vulnerability CWE-352. Impact If a user with an administrative privilege views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Upda...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

Objective Open CBOR Run-time 安全漏洞

Objective Open CBOR Run-time oocborrt is an open source C code library. It should be used for coding and decoding functions for data in the CBOR format. A security vulnerability exists in run-time that stems from. The run-time environment installer adds a firewall rule called Sentinel License...

Software License Manager < 4.4.6 - CSRF to Stored XSS

The plugin did not have CSRF check on its settings page, nor sanitisation when outputting user input back. Attackers could make a logged in administrator change the plugin's settings, and put XSS payload in them. alert/XSS-1/' / alert/XSS-2/' / alert/XSS-3/' / alert/XSS-4/' /...