ICSA-16-287-02

icsaUScisa_csaf_ot

Siemens Automation License Manager Vulnerabilities

view advisory published 2016-07-17

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2016-8565UScritical9.1—
Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.
CVE-2016-8564USmedium6.5—
SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP…
CVE-2016-8563UShigh7.5—
Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationALM

    Siemens recommends only allowing connections from the local subnet to the ALM default Port 4410/TCP and blocking requests from other networks. These products should only be operated within trusted networks.

  • MitigationALM

    Siemens recommends only allowing connections from the local subnet to the ALM default Port 4410/TCP and blocking requests from other networks. These products should only be operated within trusted networks.

  • MitigationALM

    Siemens recommends only allowing connections from the local subnet to the ALM default Port 4410/TCP and blocking requests from other networks. These products should only be operated within trusted networks.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan