ICSA-16-287-02

icsaUScisa_csaf_ot

Siemens Automation License Manager Vulnerabilities

Advisory ansehen veröffentlicht 2016-07-17

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2016-8565UScritical9.1—
Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.
CVE-2016-8564USmedium6.5—
SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP…
CVE-2016-8563UShigh7.5—
Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationALM

    Siemens recommends only allowing connections from the local subnet to the ALM default Port 4410/TCP and blocking requests from other networks. These products should only be operated within trusted networks.

  • MitigationALM

    Siemens recommends only allowing connections from the local subnet to the ALM default Port 4410/TCP and blocking requests from other networks. These products should only be operated within trusted networks.

  • MitigationALM

    Siemens recommends only allowing connections from the local subnet to the ALM default Port 4410/TCP and blocking requests from other networks. These products should only be operated within trusted networks.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan