CVE-2022-43513 - CVE House

Back to Database

Status published High CVE-2022-43513

A vulnerability has been identified in Automation License Manager V5...

8.2 CVSS

Vulnerability Description

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected components allow to rename license files with user chosen input without authentication. This could allow an unauthenticated remote attacker to rename and move files as SYSTEM user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43513

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Siemens

View All →

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All...

A vulnerability has been identified in RUGGEDCOM i800 (All versions),...

A vulnerability has been identified in RUGGEDCOM i800 (All versions),...

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...

Affected Vendor

Siemens

View all reports →

Affected Software

Automation License Manager V5, Automation License Manager V6, TeleControl Server Basic V3

Vulnerable Versions:

0, All versions < V6.0 SP9 Upd4

Timeline

Official Publish: January 10th, 2023

Last Modified: April 9th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:P/RL:O/RC:C

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1005 Data from Local System

T1105 Ingress Tool Transfer

Command and Control

T1574 Hijack Execution Flow

Privilege Escalation

T1565 Data Manipulation