PT-2018-10585
CVE-2018-11456
·
Published
2018-08-07
·
Updated
2019-10-09
Description by
CVSS 3.1
5.8
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Automation License Manager 5 versions prior to 5.3.4.4
Description
A vulnerability allows an attacker with network access to send specially crafted network packets to determine the accessibility of a network port on a remote system. This enables the attacker to perform basic network scanning using the victim's machine. Successful exploitation requires a network connection to the affected device and does not need privileges or user interaction. The impact is limited to determining port accessibility on a target system.
Recommendations
For Automation License Manager 5 versions prior to 5.3.4.4, update to version 5.3.4.4 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾