PT-2016-7502 · Siemens · Siemens Automation License Manager

Sergey Temnikov + 1 · Publicado 2016-10-13 · Atualizado 2017-07-29 · CVE-2016-8563

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager (ALM) versions prior to 5.3 SP3 Update 1

Description The issue allows remote attackers to cause a denial of service, resulting in an ALM service outage, by sending crafted packets to TCP port 4410.

Recommendations For versions prior to 5.3 SP3 Update 1, update to version 5.3 SP3 Update 1 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-8563

Produtos afetados

Siemens Automation License Manager

Referências · 6

• http://securityfocus.com/bid/93553 · Nota
• http://securitytracker.com/id/1037011 · Nota
• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-8563 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8563 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02 · Nota