Siemens Automation License Manager vulnerabilities

15 CVEs affecting Siemens Automation License Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-44087, published 2024-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-44087, published 2024-09-10. High severity, CVSS 8.6. EPSS: 10.9% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions <…
CVE-2011-4531, published 2012-01-08. Medium severity, CVSS 5.0. EPSS: 8.4% chance of exploitation in the next 30 days. Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1)…
CVE-2011-4529, published 2012-01-08. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as…
CVE-2018-11455, published 2018-08-07. High severity, CVSS 8.8. EPSS: 5.2% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerability could allow a…
CVE-2011-4530, published 2012-01-08. Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days. Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon…
CVE-2011-4532, published 2012-01-08. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through…
CVE-2016-8563, published 2016-10-13. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.
CVE-2016-8565, published 2016-10-13. Critical severity, CVSS 9.1. EPSS: 2.9% chance of exploitation in the next 30 days. Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.
CVE-2022-43514, published 2023-01-10. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).…
CVE-2018-11456, published 2018-08-07. Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could send specially crafted network packets to determine…

Latest

CVE-2022-43513, published 2023-01-10. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).…
CVE-2021-25659, published 2021-08-10. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2). Sending specially crafted packets to port 4410/tcp…
CVE-2020-7583, published 2020-08-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users'…
CVE-2016-8564, published 2016-10-13. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.