Description
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify files that should be protected against writing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Automation License Manager 5 | All versions | — |
| Siemens | Automation License Manager 6 | All versions < V6.0.8 | — |
Advisories 1
- ICSA-20-224-07 Siemens Automation License Manager CISA ICS & IT advisories · Aug 11, 2020