CVE-2022-43514
published 2023-01-10CVE-2022-43514: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl…
PriorityP267critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.54%
71.8th percentile
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected component does not correctly validate the root path on folder related operations, allowing to modify files and folders outside the intended root directory.
This could allow an unauthenticated remote attacker to execute file operations of files outside of the specified root folder. Chained with CVE-2022-43513 this could allow Remote Code Execution.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
| siemens | automation_license_manager | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →CVE-2022-43514 is a path traversal (CWE-22) vulnerability in Siemens Automation License Manager; monitor for unauthenticated file/folder operations targeting paths outside the intended root directory over TCP/4410. ↗
- →Chain detection: CVE-2022-43514 (path traversal) chained with CVE-2022-43513 (unauthenticated file rename/move as SYSTEM) can result in Remote Code Execution — alert on sequential exploitation of both CVEs from the same source IP. ↗
- →Monitor for unauthenticated rename/move file operations on the Automation License Manager service (port 4410/TCP), particularly those targeting paths outside the ALM root folder, which may indicate exploitation of CVE-2022-43513 as a precursor to CVE-2022-43514. ↗
- ·Automation License Manager V5 (all versions) has NO fix available; only V6 users can remediate by patching to V6.0 SP9 Upd4 or later. ↗
- ·No known public exploits specifically target these vulnerabilities at time of advisory publication. ↗
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9pw2-prwg-r2jf: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6
ghsa_unreviewed·2023-01-10·CVSS 8.2
CVE-2022-43514 [HIGH] CWE-22 GHSA-9pw2-prwg-r2jf: A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4). The affected component does not correctly validate the root path on folder related operations, allowing to modify files and folders outside the intended root directory. This could allow an unauthenticated remote attacker to execute file operations of files outside of the specified root folder. Chained with CVE-2022-43513 this could allow Remote Code Execution.
CISA ICS
Siemens Telecontrol Server Basic
cisa_ics·2024-04-11
Siemens Telecontrol Server Basic
ICS Advisory
##
Siemens Telecontrol Server Basic
Release DateApril 11, 2024
Alert CodeICSA-24-102-08
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Telecontrol Server Basic
- Vulnerabilities: Inadequate Encryption Strength, Double Free, Integer Overflow or Wraparound, External Control of File Name or Path, Path Traversal, Improper Input Validation, Missing Encry
CISA ICS
Siemens Automation License Manager
cisa_ics·2023-01-13·CVSS 8.2
[HIGH] Siemens Automation License Manager
ICS Advisory
##
Siemens Automation License Manager
Last RevisedJanuary 13, 2023
Alert CodeICSA-23-012-10
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.2
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Automation License Manager (ALM)
- Vulnerabilities: External Control of File Name or Path, Path Traversal
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to modify and rename l
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://cert-portal.siemens.com/productcert/html/ssa-476715.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-556635.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-476715.pdfhttps://cert-portal.siemens.com/productcert/html/ssa-476715.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-556635.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-476715.pdf
2023-01-10
Published