CVE-2022-43514 Path traversal in Automation License Manager V5
Unauthenticated remote attackers can modify files outside the root directory via path traversal, potentially leading to remote code execution when chained with another vulnerability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-43514?
CVE-2022-43514 is a high-severity path traversal vulnerability in Siemens Automation License Manager V5, published on 10 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected component does not correctly validate the root path on folder related operations, allowing to modify files and folders outside the intended root directory. This could allow an unauthenticated remote attacker to execute file operations of files outside of the specified root folder. Chained with CVE-2022-43513 this could allow Remote Code Execution.
Weakness: CWE-22
Which versions are affected by CVE-2022-43514?
It affects 1 product.
Products include Siemens Automation License Manager.
How do I fix CVE-2022-43514?
No fix has been published for CVE-2022-43514 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-43514 being exploited?
There is no known exploitation of CVE-2022-43514 in the wild and no public exploit code.
Other vulnerabilities in Siemens Automation License Manager V5
- CVE-2016-8565 Missing authorization in n/a
- CVE-2018-11455 Path traversal in Automation License Manager 5, Automation License Manager 6
- CVE-2022-43513 Path traversal in Automation License Manager V5
- CVE-2020-7583 Missing authorization in Automation License Manager 5
- CVE-2021-25659 Denial of service in Automation License Manager 5
Sources
Also known as GHSA-9pw2-prwg-r2jf.