CVE-2011-4529

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

7.16%

Published

Jan 8, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBsiemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command.

Weaknesses (CWE)

CWE-119

Affected Products (1)

siemens · automation_license_managervulnerable

References (8)

http://aluigi.altervista.org/adv/almsrvx_1-adv.txt

Exploit

http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content

Vendor Advisory

http://support.automation.siemens.com/WW/view/en/114358

http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf

US Government Resource