ICSA-18-226-03 Siemens Automation License Manager
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-11456US | medium5.8 | — | ||
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could send specially crafted network pac… | ||||
| CVE-2018-11455US | high8.8 | — | ||
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerabili… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- MitigationAutomation License Manager 5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible
- MitigationAutomation License Manager 5
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible
- MitigationAutomation License Manager 6
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible
- MitigationAutomation License Manager 6
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible
- FixedAutomation License Manager 5
Update to V5.3.4.4 - Download: https://support.industry.siemens.com/cs/ww/en/view/114358
https://support.industry.siemens.com/cs/ww/en/view/114358 - FixedAutomation License Manager 5
Update to V5.3.4.4 - Download: https://support.industry.siemens.com/cs/ww/en/view/114358
https://support.industry.siemens.com/cs/ww/en/view/114358 - FixedAutomation License Manager 6
Update to V6.0.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/114358
https://support.industry.siemens.com/cs/ww/en/view/114358
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan