Siemens Automation License Manager
Siemens Automation License Manager contains two vulnerabilities which, when combined, could allow an attacker to modify and rename license files, extract licenses and overwrite arbitrary files on the target system potentially leading to privilege escalation and remote code execution. The affected functionality is not available for remote attackers in the default configuration since version V6.0 SP2 of Automation License Manager. Siemens has released an update for Automation License Manager V6 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-43514US | critical9.8 | — | ||
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All… | ||||
| CVE-2022-43513US | high7.5 | — | ||
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-476715: Two Vulnerabilities in Automation License Manager - CSAF Versionself
- SSA-476715: Two Vulnerabilities in Automation License Manager - PDF Versionself
- SSA-476715: Two Vulnerabilities in Automation License Manager - TXT Versionself
- ICS Advisory ICSA-23-012-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-012-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationAutomation License Manager V5
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- MitigationAutomation License Manager V5
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- MitigationAutomation License Manager V6
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- MitigationAutomation License Manager V6
If no remote connections are needed, disable “Allow Remote Connections” on the Automation License Manager settings menu (default since version V6.0 SP2)
- Kein Fix geplantAutomation License Manager V5
Currently no fix is planned
- Kein Fix geplantAutomation License Manager V5
Currently no fix is planned
- BehobenAutomation License Manager V6
Update to V6.0 SP9 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenAutomation License Manager V6
Update to V6.0 SP9 Upd4 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - WorkaroundAutomation License Manager V5
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- WorkaroundAutomation License Manager V5
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- WorkaroundAutomation License Manager V6
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- WorkaroundAutomation License Manager V6
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan