Siemens License Server (SLS)
view advisory published 2026-08-11
Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-69109US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of s… | ||||
| CVE-2026-69108US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-077553: Multiple Vulnerabilities in Siemens License Server (SLS) - CSAF Versionself
- SSA-077553: Multiple Vulnerabilities in Siemens License Server (SLS) - HTML Versionself
- ICS Advisory ICSA-26-225-07 JSONself
- ICS Advisory ICSA-26-225-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedSiemens License Server (SLS)
Update to V5.1 or later version
https://support.sw.siemens.com/product/1586485382/ - FixedSiemens License Server (SLS)
Update to V5.3 or later version
https://support.sw.siemens.com/product/1586485382/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan