Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities

Bugtraq ID:	109155
Class:	Unknown
CVE:	CVE-2018-20031 CVE-2018-20032 CVE-2018-20033 CVE-2018-20034
Remote:	Yes
Local:	No
Published:	Jul 11 2019 12:00AM
Updated:	Jul 11 2019 12:00AM
Credit:	Schneider Electric
Vulnerable:	Schneider-Electric Floating License Manager 1.4 Schneider-Electric Floating License Manager 1.3 Schneider-Electric Floating License Manager 1.2 Schneider-Electric Floating License Manager 1.1 Schneider-Electric Floating License Manager 1.0 Schneider-Electric Floating License Manager 2.3.0.0 Schneider-Electric Floating License Manager 2.2.0.0
Not Vulnerable:	Schneider-Electric Floating License Manager 2.3.1.0

Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities

Schneider Electric Floating License Manager is prone to multiple security vulnerabilities

Attackers can exploit these issues to shut down the affected device, denying service to legitimate users.

Floating License Manager version 2.3.0.0 and prior are vulnerable.

Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Schneider Electric Floating License Manager ICSA-19-192-07 Multiple Security Vulnerabilities

References:

• Schneider Electric HomePage (Schneider Electric)
  
• ICS Advisory (ICSA-19-192-07) Schneider Electric Floating License Manager (CERT)