Vulnerabilities > Siemens > Automation License Manager > High

DATE CVE VULNERABILITY TITLE RISK
2023-01-10 CVE-2022-43513 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Siemens Automation License Manager
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).
network
low complexity
siemens CWE-610
7.5
2021-08-10 CVE-2021-25659 Resource Exhaustion vulnerability in Siemens Automation License Manager
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2).
network
low complexity
siemens CWE-400
7.5
2020-08-14 CVE-2020-7583 Incorrect Authorization vulnerability in Siemens Automation License Manager
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8).
local
low complexity
siemens CWE-863
7.8
2018-08-07 CVE-2018-11455 Path Traversal vulnerability in Siemens Automation License Manager
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1).
network
low complexity
siemens CWE-22
8.8
2016-10-13 CVE-2016-8563 Improper Input Validation vulnerability in Siemens Automation License Manager 5.3
Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.
network
low complexity
siemens CWE-20
7.5