Summary
A vulnerability was identified in the Automation License Manager software before V5.2 that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial of service preventing legitimate users from using the system.
Siemens has released a new version for Automation License Manager and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denia…
Revision history
-
#2
Used CVE ID (CVE-2012-4691) instead of the deprecated SVE ID (SVE-2012-0001); Corrected CVSS vector; Updated SSA to current data model and support of csaf
-
#1
Publication Date
References
-
SSA-783261: Denial of Service Vulnerability in Automation License Manager (ALM) Before V5.2 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-783261.html