SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3
view advisory published 2025-04-08
Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-30000US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application does not properly restrict permissions of the users. This could… | ||||
| CVE-2025-29999US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application searches for executable files in the application folder without… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedSiemens License Server (SLS)
Update to V4.3 or later version
- FixedSiemens License Server (SLS)
Update to V4.3 or later version
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan