virus logo Intrusion Prevention

Siemens.Automation.License.Manager.DoS

description-logoDescription

This indicates an attack attempt to exploit a Denial of Service of Buffer Overflow Vulnerability in Siemens Automation License Manager.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application which can lead to either null pointer dereferencing, buffer overflow or improper exception handling . As a result, a remote attacker can exploit this to execute arbitrary code within the context of the application or cause a denial of service condition.

affected-products-logoAffected Products

Siemens Automation License Manager (ALM) 4.0 to 5.1+SP1+Upd1

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&objId=57252401&nodeid0=17323948&load=content&lang=en&siteid=cseus&aktprim=0&objaction=csview&extranet=standard&viewreg=WW

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf http://aluigi.altervista.org/adv/almsrvx_1-adv.txt
ID 30896
Created Feb 15, 2012
Updated Oct 06, 2016
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2011-4531 CVE-2011-4530 CVE-2011-4529
Exploit Prediction Score 3.02%
Default Action drop
Active
Affected OS Windows
Affected App SCADA