Siemens License Server Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Siemens License Server (SLS) versions prior to 4.3. The issue arises because the application improperly validates executable files in the application directory. This flaw could enable an attacker to execute arbitrary code with administrative rights by placing a malicious executable in the same folder.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a low-privileged user to execute arbitrary code with administrative privileges.

Remediation

Users are advised to update Siemens License Server to version 4.3 or later. For more information, visit the Siemens Support Center.