File Upload Vulnerability in Siemens Automation License Manager

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A file upload vulnerability exists in Siemens Automation License Manager. A remote attacker could use the vulnerability to send specially crafted packets to upload files...

CVE-2016-8565: Improper Access Control

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

PT-2016-7504

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions prior to 5.3 SP3 Description The issue allows remote attackers to perform unauthorized file system modifications, including writing to files, renaming files, creating directories, or deleting...

PT-2016-7502

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions prior to 5.3 SP3 Update 1 Description The issue allows remote attackers to cause a denial of service, resulting in an ALM service outage, by sending crafted packets to TCP port 4410...

CVE-2016-8563: Improper Input Validation

Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service ALM service outage via crafted packets to TCP port 4410...

CVE-2016-8564: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410...

Siemens Automation License Manager suffers from a denial of service vulnerability (CNVD-2016-08772)

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A denial of service vulnerability exists in Siemens Automation License Manager. An attacker can exploit the vulnerability by sending specially crafted packets to port...

PT-2016-7503

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions prior to 5.3 SP3 Update 1 Description The issue allows remote attackers to execute arbitrary SQL commands via crafted traffic to the TCP port 4410. This can be achieved by sending malicious input...

Reprise License Manager 'akey' stack buffer overflow vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. A stack buffer overflow vulnerability exists in Reprise License Manager versions 12.0BL2, 12.1BL2, and 12.1BL3, which stems from the program's failure to perform sufficient bounds checking on user-submitted...

Reprise License Manager '/goform/activate_doit' Stack Buffer Overflow Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. A stack buffer overflow vulnerability exists in Reprise License Manager version 12.0BL2, which stems from the program's failure to perform sufficient bounds checking on user-submitted input. An attacker could...

Siemens Automation License Manager Vulnerabilities

OVERVIEW Siemens has identified vulnerabilities in Siemen’s Automation License Manager ALM. These vulnerabilities were reported directly to Siemens by Sergey Temnikov and Vladimir Dashchenko from Critical Infrastructure Defence Team, Kaspersky Lab. Siemens has produced a new version to mitigate...

Gemalto Sentinel License Manager 18.0.1 Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License Manager enforces and manages licensing in multi-user...

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Exploit for windows platform in category web applications Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License...

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The...

PT-2016-7982

Уязвимость менеджера лицензий Sentinel License Manager связана с некорректным ограничением имени пути к каталогу «/ int /». Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, удалять или редактировать защищаемые файлы с использованием параметров «alpremove» и «check in fil...

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License Manager enforces and manages licensing in multi-user...

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability

Summary The Sentinel License Manager enforces and manages licensing in multi-user environment. It keeps track of all the licenses and handles requests from network users who want to run your application, granting authorization to the requesters to allow them to run the application, and denying...

Reprise License Manager diagnostics_doit Directory Traversal

A path traversal vulnerability exists in the Reprise License Manager due to insufficient input validation while processing HTTP requests. A remote unauthenticated attacker can leverage this vulnerability by sending crafted HTTP requests to the target system. Successful exploitation would allow an...

Reprise License Manager edit_lf_process Directory Traversal

A directory traversal vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/goform/editlfprocess" URI. A remote unauthenticated attacker can leverage this vulnerability by sending crafted HTTP request...

Reprise License Manager HTTP Parameter Parsing Stack Buffer Overflow

A stack buffer overflow vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation of the licfile and debuglog parameters while processing an HTTP request. Successful exploitation would lead to arbitrary code execution under the security context...