SSA-103653: Denial-of-Service Vulnerability in Automation License Manager
A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-44087US | — | — | ||
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationAutomation License Manager V5
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- MitigationAutomation License Manager V6.0
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- MitigationAutomation License Manager V6.2
If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only
- Kein Fix geplantAutomation License Manager V5
Currently no fix is planned
- BehobenAutomation License Manager V6.0
Update to V6.0 SP12 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenAutomation License Manager V6.2
Update to V6.2 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan