Siemens Automation License Manager Path Traversal (CVE-2022-43514)

Binary data siemensalmcve-2022-43514.nbin...

CVE-2022-43514

CVE-2022-43514 affects Siemens Automation License Manager (ALM) 5.x, ALM 6.x (pre V6.0 SP9 Upd4) and TeleControl Server Basic (pre V3.1.2). The vulnerability is an improper validation of the root path during folder-related operations, allowing an unauthenticated attacker to perform file operation...

CVE-2022-43514

A vulnerability has been identified in Automation License Manager V5 All versions, Automation License Manager V6 All versions V6.0 SP9 Upd4, TeleControl Server Basic V3 All versions V3.1.2. The affected component does not correctly validate the root path on folder related operations, allowing to...

Siemens Automation License Manager

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...