Critical ICSA-19-192-07 4 CVEs

Schneider Electric Floating License Manager

Published Jul 11, 2019 · Updated Jul 11, 2019

Vendor: Schneider Electric Product: Floating License Manager

Summary

These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product.

Vulnerabilities 4

Unscored —

CVE-2018-20031

A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet …

Flexera Software FlexNet Publisher

Mar 21, 2019
Unscored —

CVE-2018-20032

A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publishe…

Flexera Software FlexNet Publisher

Mar 21, 2019
Unscored —

CVE-2018-20033

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and …

Flexera Software FlexNet Publisher

Feb 25, 2019
Unscored —

CVE-2018-20034

A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet …

Flexera Software FlexNet Publisher

Mar 21, 2019

Revision history

2019-07-11 #1
ICSA-19-192-07 Schneider Electric Floating License Manager

References

ICS Advisory ICSA-19-192-07 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-192-07
Recommended Practices
https://ics-cert.us-cert.gov/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://ics-cert.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf