CVE-2018-20033
highpriority · track · 40EPSS 0.037 · 90 %ileEURUUSEPSS · scored 2026-10-27
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedFloating License Managercisa_csaf_ot
Schneider Electric recommends users upgrade to Floating License Manager (FLM) Version 2.3.1.0 as soon as possible.
- FixedFlexNet Publishercisa_csaf_ot
Flexera recommends all users using affected versions of FlexNet Publisher upgrade to Version 2018 R4 or newer as soon as possible. The updates can be obtained with a customer account at the following location (login required):
https://flexerasoftware.flexnetoperations.com/control/inst/login?nextURL=%2Fcontrol%2Finst%2Findex - MitigationVijeo Citect and Citect SCADA Floating License Managercisa_csaf_ot
AVEVA states that users who have deployed Floating License Manager Version 2.3.0.0 and earlier to manage their Software Licensing for Vijeo Citect or Citect SCADA (Version 7.30 and later) could be impacted.
- MitigationFloating License Managercisa_csaf_ot
Schneider Electric has made a fix for these vulnerabilities available for download on its website
https://www.schneider-electric.com/en/download/document/FLM_V2.3.1.0/ - MitigationFlexNet Publishercisa_csaf_ot
More information on this issue can be found at the following location on the Flexera site:
https://community.flexera.com/t5/FlexNet-Publisher-News/FlexNet-Publisher-2018-R4-SP1-is-now-available/ba-p/95063/jump-to/first-unread-message
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (21)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- ICSA-19-192-05AVEVA Vijeo Citect and Citect SCADA Floating License Manager2019-07-11icsa · cisa_csaf_otUS
These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product.
- ICSA-19-192-07Schneider Electric Floating License Manager2019-07-11icsa · cisa_csaf_otUS
These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product.
- ICSA-19-323-01Flexera FlexNet Publisher2019-11-19icsa · cisa_csaf_otUS
These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product. The memory corruption vulnerability could allow remote code execution.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (21)
External citations — patches, advisories, analysis.
- http://www.ibm.com/support/docview.wsscnnvd
- http://www.ibm.com/support/docview.wss?uid=ibm10879027cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2018-20033cnnvd
- https://secuniaresearch.flexerasoftware.com/advisories/85979/cnnvd
- https://support.citrix.com/article/CTX261963cnnvd
- https://www.auscert.org.au/bulletins/78450cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.2582/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.3621/cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan