ICSA-24-256-06

icsaUScisa_csaf_ot

Siemens Automation License Manager

view advisory published 2024-09-10

A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-44087US——
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationAutomation License Manager V5

    If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only

  • MitigationAutomation License Manager V6.0

    If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only

  • MitigationAutomation License Manager V6.2

    If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only

  • No fix plannedAutomation License Manager V5

    Currently no fix is planned

  • FixedAutomation License Manager V6.0

    Update to V6.0 SP12 Upd3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/114358/
  • FixedAutomation License Manager V6.2

    Update to V6.2 Upd3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/114358/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan