Siemens Automation License Manager Uncontrolled Resource Consumption
A vulnerability was identified in the Automation License Manager software before V5.2 that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial of service preventing legitimate users from using the system. Siemens has released a new version for Automation License Manager and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-4691US | low3.3 | — | ||
Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-783261: Denial of Service Vulnerability in Automation License Manager (ALM) Before V5.2 - CSAF Versionself
- SSA-783261: Denial of Service Vulnerability in Automation License Manager (ALM) Before V5.2 - HTML Versionself
- ICS Advisory ICSA-12-349-01 JSONself
- ICS Advisory ICSA-12-349-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationAutomation License Manager
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- BehobenAutomation License Manager
Update to V5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan