PT-2016-7502 · Siemens · Siemens Automation License Manager

Sergey Temnikov + 1 · Published 2016-10-13 · Updated 2017-07-29 · CVE-2016-8563

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager (ALM) versions prior to 5.3 SP3 Update 1

Description The issue allows remote attackers to cause a denial of service, resulting in an ALM service outage, by sending crafted packets to TCP port 4410.

Recommendations For versions prior to 5.3 SP3 Update 1, update to version 5.3 SP3 Update 1 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-8563

Affected Products

Siemens Automation License Manager

References · 6

• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-8563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8563 · Security Note
• http://securityfocus.com/bid/93553 · Note
• http://securitytracker.com/id/1037011 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02 · Note