ICSA-24-256-06

icsaUScisa_csaf_ot

Siemens Automation License Manager

Advisory ansehen veröffentlicht 2024-09-10

A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-44087US——
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationAutomation License Manager V5

    If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only

  • MitigationAutomation License Manager V6.0

    If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only

  • MitigationAutomation License Manager V6.2

    If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only

  • Kein Fix geplantAutomation License Manager V5

    Currently no fix is planned

  • BehobenAutomation License Manager V6.0

    Update to V6.0 SP12 Upd3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/114358/
  • BehobenAutomation License Manager V6.2

    Update to V6.2 Upd3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/114358/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan