Siemens Automation License Manager
Siemens Automation License Manager contains two vulnerabilities which, when combined, could allow an attacker to modify and rename license files, extract licenses and overwrite arbitrary files on the target system potentially leading to privilege escalation and remote code execution. The affected functionality is not available for remote attackers in the default configuration since version V6.0 SP2 of Automation License Manager. Siemens has released an update for Automation License Manager V6 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-43514US | critical9.8 | — | ||
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All… | ||||
| CVE-2022-43513US | high7.5 | — | ||
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All… | ||||
references
External citations — patches, advisories, analysis.
- SSA-476715: Two Vulnerabilities in Automation License Manager - CSAF Versionself
- SSA-476715: Two Vulnerabilities in Automation License Manager - PDF Versionself
- SSA-476715: Two Vulnerabilities in Automation License Manager - TXT Versionself
- ICS Advisory ICSA-23-012-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-012-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationAutomation License Manager V5
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- MitigationAutomation License Manager V5
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- MitigationAutomation License Manager V6
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- MitigationAutomation License Manager V6
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- No fix plannedAutomation License Manager V5
Currently no fix is planned
- No fix plannedAutomation License Manager V5
Currently no fix is planned
- FixedAutomation License Manager V6
Update to V6.0 SP9 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - FixedAutomation License Manager V6
Update to V6.0 SP9 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - WorkaroundAutomation License Manager V5
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- WorkaroundAutomation License Manager V5
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- WorkaroundAutomation License Manager V6
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- WorkaroundAutomation License Manager V6
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan