Siemens License Server (SLS)
Advisory ansehen veröffentlicht 2025-04-08
Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-30000US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application does not properly restrict permissions of the users. This could… | ||||
| CVE-2025-29999US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application searches for executable files in the application folder without… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3 - CSAF Versionself
- SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3 - HTML Versionself
- ICS Advisory ICSA-25-100-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-100-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSiemens License Server (SLS)
Update to V4.3 or later version
- BehobenSiemens License Server (SLS)
Update to V4.3 or later version
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan