PT-2016-7504 · Siemens · Siemens Automation License Manager

Sergey Temnikov + 1 · Publicado 2016-10-13 · Atualizado 2017-07-29 · CVE-2016-8565

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager (ALM) versions prior to 5.3 SP3

Description The issue allows remote attackers to perform unauthorized file system modifications, including writing to files, renaming files, creating directories, or deleting directories, by sending crafted packets.

Recommendations For versions prior to 5.3 SP3, update to version 5.3 SP3 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-8565

Produtos afetados

Siemens Automation License Manager

Referências · 6

• http://securityfocus.com/bid/93553 · Nota
• http://securitytracker.com/id/1037011 · Nota
• https://osv.dev/vulnerability/CVE-2016-8565 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8565 · Nota de Segurança
• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02 · Nota