Description
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Siemens License Server (SLS) | < V4.3 | V4.3 |
Advisories 3
- ICSA-25-100-01 Siemens License Server (SLS) CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0106 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 8, 2025
- SSA-525431 SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3 Siemens ProductCERT · Apr 8, 2025