|CVSS v3.1 Base Score:
|Affected Product and Versions
All versions < V6.0 SP9 Upd4
Update to V6.0 SP9 Upd4 or later version
Siemens has identified the following specific workarounds and mitigations that customers can apply to reduce the risk:
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
The vulnerability classification has been performed by using the CVSS scoring system in version 3.1 (CVSS v3.1) (https://www.first.org/cvss/). The CVSS environmental score is specific to the customer’s environment and will impact the overall CVSS score. The environmental score should therefore be individually defined by the customer to accomplish final scoring.
An additional classification has been performed using the CWE classification, a community-developed list of common software security weaknesses. This serves as a common language and as a baseline for weakness identification, mitigation, and prevention efforts. A detailed list of CWE classes can be found at: https://cwe.mitre.org/.
The affected components allow to rename license files with user chosen input without authentication. This could allow an unauthenticated remote attacker to rename and move files as SYSTEM user.
|CVSS v3.1 Base Score
|CWE-73: External Control of File Name or Path
The affected component does not correctly validate the root path on folder related operations, allowing to modify files and folders outside the intended root directory. This could allow an unauthenticated remote attacker to execute file operations of files outside of the specified root folder. Chained with CVE-2022-43513 this could allow Remote Code Execution.
|CVSS v3.1 Base Score
|CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Note, that the affected functionality is not available for remote attackers in the default configuration since version V6.0 SP2 of Automation License Manager.
|Updated workarounds and mitigations; clarified, that the affected functionality is not available for remote attackers in the default configuration