CVE-2011-4532
Siemens Automation License Manager < 5.1 - Unauthenticated Arbitrary File Write
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4532. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This is a detailed technical writeup by Luigi Auriemma describing multiple vulnerabilities in Siemens Automation License Manager, including a buffer overflow leading to RCE, service exceptions, NULL pointer dereference, and file overwriting via an ActiveX component. The writeup includes analysis of affected functions, memory corruption mechanics, and exploitation vectors.
Description
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method.
Exploits (1)
This is a detailed technical writeup by Luigi Auriemma describing multiple vulnerabilities in Siemens Automation License Manager, including a buffer overflow leading to RCE, service exceptions, NULL pointer dereference, and file overwriting via an ActiveX component. The writeup includes analysis of affected functions, memory corruption mechanics, and exploitation vectors.