SIEMENS-SSA-388646 · Published 2020-08-11 · View on Siemens ProductCERT ↗

SSA-388646 (Last Update: 2020-08-11): Local Privilege Escalation in Automation License Manager

CVSS N/A MEDIUM

Risk Summary

<p>The latest update for Automation License Manager (ALM) fixes a vulnerability that could allow local users to locally escalate privileges and modify files that should be protected against writing.</p> <p>Siemens has released an update for ALM 6 and recommends that customers update to the latest version. Siemens recommends specific countermeasures for ALM 5 as currently there are no fixes available.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-388646 (Last Update: 2020-08-11): Local Privilege Escalation in Automation License Manager See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more