var-201201-0029
Vulnerability from variot
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method. The Siemens Automation License Manager is the authorization manager program for Siemens software. The save method provided by the almaxcx.dll ActiveX control (ALMListView.ALMListCtrlE57AF4A2-EF57-41D0-8512-FECDA78F1FE7) allows any file name to be saved. The attacker constructs a malicious WEB page to entice the user to access it. file
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201201-0029", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "automation license manager", "scope": "lte", "trust": 1.0, "vendor": "siemens", "version": "5.1" }, { "model": "automation license manager", "scope": "eq", "trust": 0.9, "vendor": "siemens", "version": "500.0.1221" }, { "model": "automation license manager", "scope": "eq", "trust": 0.8, "vendor": "siemens", "version": "2.0 to 5.1+sp1+upd2" }, { "model": "automation license manager", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "5.1" }, { "model": null, "scope": "eq", "trust": 0.4, "vendor": "automation license manager", "version": "*" } ], "sources": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "BID", "id": "50831" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "CNNVD", "id": "CNNVD-201201-082" }, { "db": "NVD", "id": "CVE-2011-4532" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:siemens:automation_license_manager", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2012-001031" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Luigi Auriemma", "sources": [ { "db": "BID", "id": "50831" }, { "db": "CNNVD", "id": "CNNVD-201111-483" } ], "trust": 0.9 }, "cve": "CVE-2011-4532", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CVE-2011-4532", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 1.8, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "IVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.2, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.9 [IVD]" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "IVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "3d08cffe-2354-11e6-abef-000c29c66e3d", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.2, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.9 [IVD]" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "VHN-52477", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2011-4532", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2011-4532", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201201-082", "trust": 0.6, "value": "MEDIUM" }, { "author": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d", "trust": 0.2, "value": "MEDIUM" }, { "author": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d", "trust": 0.2, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-52477", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "VULHUB", "id": "VHN-52477" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "CNNVD", "id": "CNNVD-201201-082" }, { "db": "NVD", "id": "CVE-2011-4532" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method. The Siemens Automation License Manager is the authorization manager program for Siemens software. The save method provided by the almaxcx.dll ActiveX control (ALMListView.ALMListCtrlE57AF4A2-EF57-41D0-8512-FECDA78F1FE7) allows any file name to be saved. The attacker constructs a malicious WEB page to entice the user to access it. file", "sources": [ { "db": "NVD", "id": "CVE-2011-4532" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "BID", "id": "50831" }, { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "VULHUB", "id": "VHN-52477" } ], "trust": 2.88 }, "exploit_availability": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "reference": "https://www.scap.org.cn/vuln/vhn-52477", "trust": 0.1, "type": "unknown" } ], "sources": [ { "db": "VULHUB", "id": "VHN-52477" } ] }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2011-4532", "trust": 3.2 }, { "db": "ICS CERT", "id": "ICSA-11-361-01", "trust": 2.5 }, { "db": "BID", "id": "50831", "trust": 1.6 }, { "db": "CNNVD", "id": "CNNVD-201201-082", "trust": 1.1 }, { "db": "CNVD", "id": "CNVD-2011-5100", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2012-001031", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201111-483", "trust": 0.6 }, { "db": "IVD", "id": "65A1275C-1F7D-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "IVD", "id": "3D08CFFE-2354-11E6-ABEF-000C29C66E3D", "trust": 0.2 }, { "db": "EXPLOIT-DB", "id": "18165", "trust": 0.1 }, { "db": "SEEBUG", "id": "SSVID-89651", "trust": 0.1 }, { "db": "VULHUB", "id": "VHN-52477", "trust": 0.1 } ], "sources": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "VULHUB", "id": "VHN-52477" }, { "db": "BID", "id": "50831" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "CNNVD", "id": "CNNVD-201111-483" }, { "db": "CNNVD", "id": "CNNVD-201201-082" }, { "db": "NVD", "id": "CVE-2011-4532" } ] }, "id": "VAR-201201-0029", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "VULHUB", "id": "VHN-52477" } ], "trust": 1.72931037 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 1.0 } ], "sources": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-5100" } ] }, "last_update_date": "2024-11-23T22:27:34.639000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "57252401", "trust": 0.8, "url": "http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll\u0026objId=57252401\u0026objAction=csView\u0026nodeid0=17323948\u0026lang=en\u0026siteid=cseus\u0026aktprim=0\u0026extranet=standard\u0026viewreg=WW\u0026load=content" }, { "title": "114358", "trust": 0.8, "url": "http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo\u0026lang=en\u0026objid=114358\u0026caller=view" }, { "title": "\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u30d1\u30fc\u30c8\u30ca\u30fc", "trust": 0.8, "url": "http://www.automation.siemens.com/automation/jp/ja/solutionpartner/pages/default.aspx" }, { "title": "Top Page", "trust": 0.8, "url": "http://www.siemens.com/entry/jp/ja/" }, { "title": "Siemens Automation License Manager \u0027almaxcx.dll\u0027 ActiveX arbitrary file coverage vulnerability patch", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/72715" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-22", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-52477" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "NVD", "id": "CVE-2011-4532" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.6, "url": "http://aluigi.altervista.org/adv/almsrvx_1-adv.txt" }, { "trust": 2.5, "url": "http://www.us-cert.gov/control_systems/pdf/icsa-11-361-01.pdf" }, { "trust": 1.7, "url": "http://support.automation.siemens.com/ww/view/en/114358" }, { "trust": 1.6, "url": "http://support.automation.siemens.com/ww/llisapi.dll/57252401?func=ll\u0026objid=57252401\u0026objaction=csview\u0026nodeid0=17323948\u0026lang=en\u0026siteid=cseus\u0026aktprim=0\u0026extranet=standard\u0026viewreg=ww\u0026load=content" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4532" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4532" }, { "trust": 0.6, "url": "http://www.securityfocus.com/bid/50831" }, { "trust": 0.3, "url": "http://support.automation.siemens.com/ww/llisapi.dll?func=cslib.csinfo\u0026lang=en\u0026siteid=cseus\u0026aktprim=0\u0026extranet=standard\u0026viewreg=ww\u0026objid=17323948\u0026tree" }, { "trust": 0.3, "url": "/archive/1/520660" }, { "trust": 0.1, "url": "http://support.automation.siemens.com/ww/llisapi.dll/57252401?func=ll\u0026amp;objid=57252401\u0026amp;objaction=csview\u0026amp;nodeid0=17323948\u0026amp;lang=en\u0026amp;siteid=cseus\u0026amp;aktprim=0\u0026amp;extranet=standard\u0026amp;viewreg=ww\u0026amp;load=content" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "VULHUB", "id": "VHN-52477" }, { "db": "BID", "id": "50831" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "CNNVD", "id": "CNNVD-201111-483" }, { "db": "CNNVD", "id": "CNNVD-201201-082" }, { "db": "NVD", "id": "CVE-2011-4532" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "VULHUB", "id": "VHN-52477" }, { "db": "BID", "id": "50831" }, { "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "db": "CNNVD", "id": "CNNVD-201111-483" }, { "db": "CNNVD", "id": "CNNVD-201201-082" }, { "db": "NVD", "id": "CVE-2011-4532" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2011-12-05T00:00:00", "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "date": "2012-01-11T00:00:00", "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "date": "2011-12-05T00:00:00", "db": "CNVD", "id": "CNVD-2011-5100" }, { "date": "2012-01-08T00:00:00", "db": "VULHUB", "id": "VHN-52477" }, { "date": "2011-11-28T00:00:00", "db": "BID", "id": "50831" }, { "date": "2012-01-11T00:00:00", "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "date": "1900-01-01T00:00:00", "db": "CNNVD", "id": "CNNVD-201111-483" }, { "date": "2012-01-11T00:00:00", "db": "CNNVD", "id": "CNNVD-201201-082" }, { "date": "2012-01-08T20:55:01.343000", "db": "NVD", "id": "CVE-2011-4532" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-03-15T00:00:00", "db": "CNVD", "id": "CNVD-2011-5100" }, { "date": "2012-01-09T00:00:00", "db": "VULHUB", "id": "VHN-52477" }, { "date": "2012-01-03T21:50:00", "db": "BID", "id": "50831" }, { "date": "2012-01-11T00:00:00", "db": "JVNDB", "id": "JVNDB-2012-001031" }, { "date": "2011-11-30T00:00:00", "db": "CNNVD", "id": "CNNVD-201111-483" }, { "date": "2012-01-11T00:00:00", "db": "CNNVD", "id": "CNNVD-201201-082" }, { "date": "2024-11-21T01:32:29.463000", "db": "NVD", "id": "CVE-2011-4532" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201111-483" }, { "db": "CNNVD", "id": "CNNVD-201201-082" } ], "trust": 1.2 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens Automation License Manager \u0027almaxcx.dll\u0027 ActiveX Arbitrary File Overwrite Vulnerability", "sources": [ { "db": "CNVD", "id": "CNVD-2011-5100" }, { "db": "BID", "id": "50831" } ], "trust": 0.9 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Path traversal", "sources": [ { "db": "IVD", "id": "65a1275c-1f7d-11e6-abef-000c29c66e3d" }, { "db": "IVD", "id": "3d08cffe-2354-11e6-abef-000c29c66e3d" }, { "db": "CNNVD", "id": "CNNVD-201201-082" } ], "trust": 1.0 } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…