CVE-2016-8565

Siemens ALM (Automation License Manager) vulnerable to a remote path-traversal flaw in all versions before 5.3 SP3 Update 1. A remote attacker can send crafted packets to ALM to write/rename files, create or delete directories. Remediation: update to ALM version 5.3 SP3 Update 1; restrict access ...

Siemens Automation License Manager Vulnerabilities

OVERVIEW Siemens has identified vulnerabilities in Siemen’s Automation License Manager ALM. These vulnerabilities were reported directly to Siemens by Sergey Temnikov and Vladimir Dashchenko from Critical Infrastructure Defence Team, Kaspersky Lab. Siemens has produced a new version to mitigate...