Code Execution Flaw in Siemens License Server Affects All Versions Before 4.3

CVE-2025-29999

What is CVE-2025-29999?

A flaw has been identified in Siemens License Server that permits execution of arbitrary code with administrative privileges. This vulnerability arises from the application's inadequate validation when searching for executable files within its own directory. An attacker can exploit this weakness by placing a malicious executable in the application folder, potentially compromising the system's security.

References