vulnerability
Siemens License Server (SLS)
Critical
Summary
Siemens License Server (SLS) versions prior to 5.3 are vulnerable to two separate attacks: a local privilege escalation due to an insecure sudoers policy, allowing an attacker to execute arbitrary commands and plant malicious files as root, and a path traversal vulnerability due to a lack of input sanitization, enabling remote access to arbitrary files. Siemens has released updates to address these issues. Organizations should immediately update to version 5.3 or later.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data