CVE-2011-4529: Siemens Automation License Manager

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command.

Affected products

• Siemens Automation License Manager: up to and including 5.1

Published 2012-01-08. Last modified 2026-06-16.