Critical ICSA-19-192-05 4 CVEs

AVEVA Vijeo Citect and Citect SCADA Floating License Manager

Published Jul 11, 2019 · Updated Jul 11, 2019

Vendor: AVEVA Product: Vijeo Citect and Citect SCADA Floating License Manager

Summary

These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product.

Vulnerabilities 4

Unscored —

CVE-2018-20031

A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet …

Flexera Software FlexNet Publisher

Mar 21, 2019
Unscored —

CVE-2018-20032

A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publishe…

Flexera Software FlexNet Publisher

Mar 21, 2019
Unscored —

CVE-2018-20033

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and …

Flexera Software FlexNet Publisher

Feb 25, 2019
Unscored —

CVE-2018-20034

A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet …

Flexera Software FlexNet Publisher

Mar 21, 2019

Revision history

2019-07-11 #1
ICSA-19-192-05 AVEVA Vijeo Citect and Citect SCADA Floating License Manager

References

ICS Advisory ICSA-19-192-05 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-192-05
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B