Unscored CVE-2016-8564 EUVD-2016-9412GHSA-pp9j-r5qv-wgcj

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrar…

Published Oct 13, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.

Advisories 1

ICSA-16-287-02 Siemens Automation License Manager Vulnerabilities CISA ICS & IT advisories · Jun 5, 2025

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02
1037011 vdb-entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf
93553 vdb-entry