Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:automation_license_manager:*:sp1:*:*:*:*:*:*

part: a version: * update: sp1

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductAutomation License Manager (1569c134-87c0-51f1-b0b9-990f2a698bb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4532 vulnerable 2026-06-08 04:59:31.745295 Details available
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method.
Published: 2012-01-08T20:00:00.000Z
Updated: 2024-09-17T02:11:52.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4531 vulnerable 2026-06-08 04:59:31.744990 Details available
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command.
Published: 2012-01-08T20:00:00.000Z
Updated: 2024-09-17T02:36:36.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4530 vulnerable 2026-06-08 04:59:31.744653 Details available
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function.
Published: 2012-01-08T20:00:00.000Z
Updated: 2024-09-16T17:15:01.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4529 vulnerable 2026-06-08 04:59:31.744237 Details available
Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command.
Published: 2012-01-08T20:00:00.000Z
Updated: 2024-09-17T01:46:10.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.