Vulnerability · Published Aug 14, 2020 · Assigned by siemens
CVE-2020-7583
High 7.8
In plain English
A high-severity security flaw in Automation License Manager 5 from Siemens AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 81.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify files that should be protected against writing.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens AG | Automation License Manager 5 | All versions |
| Siemens AG | Automation License Manager 6 | All versions < V6.0.8 |
Weakness: CWE-285
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-388646.pdf x_refsource_MISC