Vulnerability Description
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify files that should be protected against writing.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Automation License Manager | >= 5.0.0, < 6.0.8 |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-388646.pdfPatchVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-388646.pdfPatchVendor Advisory
FAQ
What is CVE-2020-7583?
CVE-2020-7583 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileg...
How severe is CVE-2020-7583?
CVE-2020-7583 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7583?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Automation License Manager.