Denial of Service Vulnerability in Siemens Automation License Manager
CVE-2011-4531

Currently unrated

Key Information:

Vendor
Siemens
Status
Automation License Manager
Vendor
CVE Published:
8 January 2012

Summary

The Siemens Automation License Manager (ALM) versions 4.0 through 5.1+SP1+Upd1 are vulnerable to a denial of service attack. A remote attacker can exploit crafted content in the 'get_target_ocx_param' or 'send_target_ocx_param' commands, leading to a NULL pointer dereference and causing the daemon to crash. As a result, legitimate users may experience disruptions in service, highlighting the need for timely updates and robust security measures to mitigate this risk.

References

http://support.automation.siemens.com/WW/view/en/114358
x_refsource_CONFIRM
http://aluigi.altervista.org/adv/almsrvx_1-adv.txt
x_refsource_MISC
http://support.automation.siemens.com/WW/llisapi.dll/5725...
x_refsource_CONFIRM

EPSS Score

22% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.