var-201808-0746
Vulnerability from variot
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker to do basic network scanning using the victims machine. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges, no user interaction is required. The impact is limited to determining whether or not a port on a target system is accessible by the affected device. The Siemens Automation License Manager is a Siemens system from Germany that handles remote and local certificates in HMI, SCADA and industrial products. An attacker can exploit these issues using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201808-0746",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "automation license manager",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "5.3.4.4"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.9,
"vendor": "siemens",
"version": "5.2"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.9,
"vendor": "siemens",
"version": "5.1"
},
{
"model": "automation license manager",
"scope": "lt",
"trust": 0.8,
"vendor": "siemens",
"version": "5 (5.3.4.4 )"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "5.*\u003c5.3.4.4"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "4.0"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "5.0"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.3,
"vendor": "siemens",
"version": "6.0"
},
{
"model": "automation license manager",
"scope": "eq",
"trust": 0.3,
"vendor": "siemens",
"version": "5.3"
},
{
"model": "automation license manager",
"scope": "ne",
"trust": 0.3,
"vendor": "siemens",
"version": "6.0.1"
},
{
"model": "automation license manager",
"scope": "ne",
"trust": 0.3,
"vendor": "siemens",
"version": "5.3.4.4"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "automation license manager",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:siemens:automation_license_manager",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Vladimir Dashchenko of Kaspersky Lab.",
"sources": [
{
"db": "BID",
"id": "105114"
}
],
"trust": 0.3
},
"cve": "CVE-2018-11456",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2018-11456",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-19603",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-121317",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 3.9,
"id": "CVE-2018-11456",
"impactScore": 1.4,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-11456",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-11456",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2018-19603",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201808-238",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-121317",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "VULHUB",
"id": "VHN-121317"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in Automation License Manager 5 (All versions \u003c 5.3.4.4). An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker to do basic network scanning using the victims machine. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges, no user interaction is required. The impact is limited to determining whether or not a port on a target system is accessible by the affected device. The Siemens Automation License Manager is a Siemens system from Germany that handles remote and local certificates in HMI, SCADA and industrial products. \nAn attacker can exploit these issues using directory-traversal characters (\u0027../\u0027) to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-11456"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "VULHUB",
"id": "VHN-121317"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-11456",
"trust": 3.6
},
{
"db": "SIEMENS",
"id": "SSA-920962",
"trust": 2.3
},
{
"db": "BID",
"id": "105114",
"trust": 2.0
},
{
"db": "ICS CERT",
"id": "ICSA-18-226-03",
"trust": 1.1
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2018-19603",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997",
"trust": 0.8
},
{
"db": "IVD",
"id": "E2FC09B1-39AB-11E9-8535-000C29342CB1",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-121317",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "VULHUB",
"id": "VHN-121317"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"id": "VAR-201808-0746",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "VULHUB",
"id": "VHN-121317"
}
],
"trust": 1.5293103700000001
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
}
]
},
"last_update_date": "2024-11-23T21:38:26.366000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-920962",
"trust": 0.8,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf"
},
{
"title": "Patch for Siemens Automation License Manager Information Disclosure Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/140865"
},
{
"title": "Siemens Automation License Manager Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=83957"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-284",
"trust": 1.9
},
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-121317"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.3,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/105114"
},
{
"trust": 1.1,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-226-03"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11456"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-11456"
},
{
"trust": 0.3,
"url": "http://www.siemens.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "VULHUB",
"id": "VHN-121317"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"db": "VULHUB",
"id": "VHN-121317"
},
{
"db": "BID",
"id": "105114"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-09-21T00:00:00",
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"date": "2018-09-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"date": "2018-08-07T00:00:00",
"db": "VULHUB",
"id": "VHN-121317"
},
{
"date": "2018-08-14T00:00:00",
"db": "BID",
"id": "105114"
},
{
"date": "2018-11-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"date": "2018-08-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"date": "2018-08-07T15:29:00.607000",
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-09-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-19603"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-121317"
},
{
"date": "2018-08-14T00:00:00",
"db": "BID",
"id": "105114"
},
{
"date": "2019-01-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008997"
},
{
"date": "2020-07-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201808-238"
},
{
"date": "2024-11-21T03:43:24.340000",
"db": "NVD",
"id": "CVE-2018-11456"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens Automation License Manager Information Disclosure Vulnerability",
"sources": [
{
"db": "IVD",
"id": "e2fc09b1-39ab-11e9-8535-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-19603"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201808-238"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…