CVE-2022-43513: 
Siemens Automation License Manager vulnerability analysis and mitigation

A vulnerability has been identified in Siemens Automation License Manager V5 (All versions) and V6 (All versions < V6.0 SP9 Upd4). The affected components allow renaming of license files with user-chosen input without authentication, which could allow an unauthenticated remote attacker to rename and move files as a SYSTEM user. The vulnerability was discovered in October 2022 and disclosed in January 2023 (CISA Advisory, Siemens Advisory).

The vulnerability (CVE-2022-43513) has been assigned a CVSS v3.1 base score of 8.2 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L. The vulnerability is classified as CWE-73: External Control of File Name or Path, allowing an attacker to manipulate file names and paths without proper authentication (NVD).

Successful exploitation of this vulnerability could allow an attacker to modify and rename license files, extract licenses, and overwrite arbitrary files on the target system, potentially leading to privilege escalation and remote code execution when chained with other vulnerabilities (Siemens Advisory).

The vulnerability can be exploited by an unauthenticated remote attacker. The affected functionality is not available for remote attackers in the default configuration since version V6.0 SP2 of Automation License Manager (Siemens Advisory).

Siemens has released updates for Automation License Manager V6 and recommends updating to V6.0 SP9 Upd4 or later version. For systems where updates are not available, Siemens recommends: 1) If no remote connections are needed, disable 'Allow Remote Connections' on the Automation License Manager settings menu, 2) If remote connections are needed, limit remote access to port 4410/tcp to trusted systems only (CISA Advisory, Siemens Advisory).