PT-2012-1905 · Siemens · Siemens Automation License Manager

Luigi Auriemma · Publicado 2012-01-08 · Atualizado 2012-01-09 · CVE-2011-4529

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager versions 4.0 through 5.1+SP1+Upd1

Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved by sending a long serialid field in a licensekey command. The commands check licensekey and read licensekey are specifically mentioned as vulnerable to this issue.

Recommendations For versions 4.0 through 5.1+SP1+Upd1, consider disabling the check licensekey and read licensekey commands until a patch is available to prevent exploitation. Restrict access to the licensekey command to minimize the risk of arbitrary code execution. Avoid using long serialid fields in the licensekey command until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-4529

Produtos afetados

Siemens Automation License Manager

Referências · 6

• 🔥 https://exploit-db.com/exploits/18165 · Exploit
• 🔥 http://aluigi.altervista.org/adv/almsrvx_1-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4529 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf · Nota
• http://support.automation.siemens.com/WW/view/en/114358 · Nota
• http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content · Aviso do Fabricante