Skip to content
OpenAdvisories
Critical ICSA-18-144-01 3 CVEs

Schneider Electric Floating License Manager

Published May 24, 2018 · Updated May 24, 2018

Vendor: Schneider Electric Product: CitectHistorian Product: CitectSCADA Product: EcoStruxure Modicon Builder Product: EcoStruxure Power SCADA Operations Product: EcoStruxure™ Power Monitoring Expert Product: Energy Expert Product: PlantStruxure PES Product: SCADA Expert Vijeo Citect / CitectSCADA Product: StruxureWare Power Monitoring Expert Product: Vijeo Historian/CitectHistorian

Summary

Successful exploitation of these vulnerabilities could cause a denial of service, allow arbitrary execution of code with system level privileges, or send users to arbitrary websites.

Vulnerabilities 3

  • Unscored —
    CVE-2016-10395

    In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platf…

    Flexera Software FlexNet Publisher
  • Unscored —
    CVE-2016-2177 EPSS 45%

    OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote at…

    openssl openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-5571

    Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 an…

Revision history

  1. #1

    ICSA-18-144-01 Schneider Electric Floating License Manager

References