Description (CNA)
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application searches for executable files in the application folder without proper validation. This could allow an attacker to execute arbitrary code with administrative privileges by placing a malicious executable in the same directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Siemens License Server (SLS) | affected 0 before V4.3 |
CWE
CWE-269
References
ADP enrichment
No English description supplied.
No references supplied.