ICSA-18-226-03

icsaUScisa_csaf_ot

ICSA-18-226-03 Siemens Automation License Manager

Advisory ansehen veröffentlicht 2018-08-07

CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-11456USmedium5.8—
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could send specially crafted network pac…
CVE-2018-11455UShigh8.8—
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerabili…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (7)

  • MitigationAutomation License Manager 5

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible

  • MitigationAutomation License Manager 5

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible

  • MitigationAutomation License Manager 6

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible

  • MitigationAutomation License Manager 6

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access as far as possible

  • BehobenAutomation License Manager 5

    Update to V5.3.4.4 - Download: https://support.industry.siemens.com/cs/ww/en/view/114358

    https://support.industry.siemens.com/cs/ww/en/view/114358
  • BehobenAutomation License Manager 5

    Update to V5.3.4.4 - Download: https://support.industry.siemens.com/cs/ww/en/view/114358

    https://support.industry.siemens.com/cs/ww/en/view/114358
  • BehobenAutomation License Manager 6

    Update to V6.0.1 - Download: https://support.industry.siemens.com/cs/ww/en/view/114358

    https://support.industry.siemens.com/cs/ww/en/view/114358
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan