Description
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application searches for executable files in the application folder without proper validation.
This could allow an attacker to execute arbitrary code with administrative privileges by placing a malicious executable in the same directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Siemens License Server (SLS) | < V4.3 | V4.3 |
Advisories 3
- ICSA-25-100-01 Siemens License Server (SLS) CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0106 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 8, 2025
- SSA-525431 SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3 Siemens ProductCERT · Apr 8, 2025