Siemens Automation License Manager CVE-2012-4691 Denial of Service Vulnerability

Bugtraq ID:	56954
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-4691
Remote:	Yes
Local:	No
Published:	Dec 14 2012 12:00AM
Updated:	Mar 19 2015 08:25AM
Credit:	CERT
Vulnerable:	Siemens SINAMICS 0 Siemens SIMOTION 0 Siemens SIMOCODE 0 Siemens Simatic Pcs7 7.1 SP2 Siemens SIMATIC NET 0 Siemens SIMATIC HMI 0 Siemens Siemens SIMATIC STEP 7 5.5.2 Siemens Siemens SIMATIC STEP 7 5.5.1 Siemens Siemens SIMATIC STEP 7 5.5 Siemens Automation License Manager 5.2 Siemens Automation License Manager 4.0
Not Vulnerable:

Siemens Automation License Manager CVE-2012-4691 Denial of Service Vulnerability

Siemens Automation License Manager is prone to a denial-of-service vulnerability.

Successful exploits will cause an affected application to cause a memory leakage and terminate the application, denying service to legitimate users.

Automation License Manager versions 4.0 through 5.2 are vulnerable.

Siemens Automation License Manager CVE-2012-4691 Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Siemens Automation License Manager CVE-2012-4691 Denial of Service Vulnerability

References:

• Siemens Automation License Manager Page (Siemens)
  
• ICSA-12-349-01�??SIEMENS AUTOMATION LICENSE MANAGER UNCONTROLLED RESOURCE CONSUMPT (ICS-CERT)