CVE-2022-43513
published 2023-01-10CVE-2022-43513: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl…
PriorityP349high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.97%
57.2th percentile
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected components allow to rename license files with user chosen input without authentication.
This could allow an unauthenticated remote attacker to rename and move files as SYSTEM user.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager_v5 | < * | * |
| siemens | automation_license_manager_v6 | — | — |
| siemens | telecontrol_server_basic_v3 | < V3.1.2 | V3.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9pw2-prwg-r2jf: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6
ghsa_unreviewed·2023-01-10·CVSS 8.2
CVE-2022-43514 [HIGH] CWE-22 GHSA-9pw2-prwg-r2jf: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4). The affected component does not correctly validate the root path on folder related operations, allowing to modify files and folders outside the intended root directory. This could allow an unauthenticated remote attacker to execute file operations of files outside of the specified root folder. Chained with CVE-2022-43513 this could allow Remote Code Execution.
GHSA
GHSA-3mf9-jjrh-xqv8: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6
ghsa_unreviewed·2023-01-10
CVE-2022-43513 [HIGH] CWE-610 GHSA-3mf9-jjrh-xqv8: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4). The affected components allow to rename license files with user chosen input without authentication. This could allow an unauthenticated remote attacker to rename and move files as SYSTEM user.
CISA ICS
Siemens Telecontrol Server Basic
cisa_ics·2024-04-11
Siemens Telecontrol Server Basic
ICS Advisory
##
Siemens Telecontrol Server Basic
Release DateApril 11, 2024
Alert CodeICSA-24-102-08
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Telecontrol Server Basic
- Vulnerabilities: Inadequate Encryption Strength, Double Free, Integer Overflow or Wraparound, External Control of File Name or Path, Path Traversal, Improper Input Validation, Missing Encry
CISA ICS
Siemens Automation License Manager
cisa_ics·2023-01-13·CVSS 8.2
[HIGH] Siemens Automation License Manager
ICS Advisory
##
Siemens Automation License Manager
Last RevisedJanuary 13, 2023
Alert CodeICSA-23-012-10
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.2
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Automation License Manager (ALM)
- Vulnerabilities: External Control of File Name or Path, Path Traversal
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to modify and rename l
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://cert-portal.siemens.com/productcert/html/ssa-476715.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-556635.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-476715.pdfhttps://cert-portal.siemens.com/productcert/html/ssa-476715.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-556635.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-476715.pdf
2023-01-10
Published