105114

https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf

The version of Siemens Automation License Manager installed on the remote host is version 6.x prior to 6.0.1 and thus, is affected by a user-input validation error that allows a directory traversal attack.
This could allow, among other actions, code execution. User interaction is required for this attack.

The remote host has a version of Siemens Automation License Manager installed that is affected by the following vulnerabilities :

 -  A user-input validation error exists that allows a     directory traversal attack. This could allow, among     other actions, code execution. User interaction is     required for this attack. (CVE-2018-11455)

 -  A user-input validation error exists that could     allow an attacker to use the target as a port-     scanning proxy. (CVE-2018-11456)

ID	Name	Product	Family	Severity
112124	Siemens Automation License Manager 6.x < 6.0.1 Directory Traversal	Nessus	SCADA	high
112123	Siemens Automation License Manager 5.x < 5.3.4.4 Multiple Vulnerabilities	Nessus	SCADA	high

CVE-2018-11455

high

Tenable Plugins

high

high