Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2024-44087

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automation License Manager V6.2 (All versions < V6.2 Upd3). Affected applications do not properly validate certain fields in incoming network packets on port 4410/tcp. This could allow an unauthenticated remote attacker to cause an integer overflow and crash of the application. This denial of service condition could prevent legitimate users from using subsequent products that rely on the affected application for license verification.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Automation License Manager V5

Default version status: unknown

  • 0 to < *affected

Siemens Automation License Manager V6.0

Default version status: unknown

  • 0 to < V6.0 SP12 Upd3affected

Siemens Automation License Manager V6.2

Default version status: unknown

  • 0 to < V6.2 Upd3affected

References