Vulnerability Description
Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.
CVSS Score
9.1
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Automation License Manager | <= 5.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93553Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037011
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdfPatchVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02
- http://www.securityfocus.com/bid/93553Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037011
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdfPatchVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02
FAQ
What is CVE-2016-8565?
CVE-2016-8565 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.
How severe is CVE-2016-8565?
CVE-2016-8565 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-8565?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Automation License Manager.