Siemens License Server (SLS)
Advisory ansehen veröffentlicht 2026-08-11
Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-69109US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of s… | ||||
| CVE-2026-69108US | — | — | ||
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-077553: Multiple Vulnerabilities in Siemens License Server (SLS) - CSAF Versionself
- SSA-077553: Multiple Vulnerabilities in Siemens License Server (SLS) - HTML Versionself
- ICS Advisory ICSA-26-225-07 JSONself
- ICS Advisory ICSA-26-225-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSiemens License Server (SLS)
Update to V5.1 or later version
https://support.sw.siemens.com/product/1586485382/ - BehobenSiemens License Server (SLS)
Update to V5.3 or later version
https://support.sw.siemens.com/product/1586485382/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan