Описание
SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.
Ссылки
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.3 (включая)
cpe:2.3:a:siemens:automation_license_manager:*:sp3:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.0023
Низкий
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.
EPSS
Процентиль: 46%
0.0023
Низкий
6.5 Medium
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-89