Description
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2). Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a denial-of-service preventing legitimate users from using the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Automation License Manager 5 | All versions | — |
| Siemens | Automation License Manager 6 | All versions < V6.0 SP9 Update 2 | — |
Advisories 2
- ICSA-21-222-02 Siemens Automation License Manager CISA ICS & IT advisories · May 6, 2025
- SSA-158827 SSA-158827: Denial-of-Service Vulnerability in Automation License Manager Siemens ProductCERT · Aug 10, 2021