Privilege Escalation Vulnerability in Siemens License Server

CVE-2025-30000

What is CVE-2025-30000?

A vulnerability has been discovered in the Siemens License Server (SLS) that allows users with lower privileges to escalate their permissions. This issue arises due to improper restrictions in user permission settings, potentially enabling attackers to gain unauthorized access to sensitive functionalities within the application. Even though the vulnerability applies to all versions prior to V4.3, it is critical for organizations utilizing the Siemens License Server to assess their systems and apply any necessary patches to mitigate the risks associated with this vulnerability.

References