Siemens License Server (SLS)

Siemens License Server (SLS) versions prior to 5.3 are vulnerable to two separate attacks: a local privilege escalation due to an insecure sudoers policy, allowing an attacker to execute arbitrary commands and plant malicious files as root, and a path traversal vulnerability due to a lack of input sanitization, enablin…