CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality, integrity and availability of the system. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or special conditions of the system, but user interaction is required.

• CWE-22
• CWE-22

• http://www.securityfocus.com/bid/105114Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdfVendor Advisory
• http://www.securityfocus.com/bid/105114Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdfVendor Advisory

Published

Aug 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1145A remote unauthenticated user can overflow a stack buffer in…
• CVE-2018-11450A reflected Cross-Site-Scripting (XSS) vulnerability has bee…
• CVE-2018-11451A vulnerability has been identified in Firmware variant IEC …
• CVE-2018-11452A vulnerability has been identified in Firmware variant IEC …
• CVE-2018-11453A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
• CVE-2018-11454A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
• CVE-2018-11456A vulnerability has been identified in Automation License Ma…
• CVE-2018-11457A vulnerability has been identified in SINUMERIK 828D V4.7 (…
• CVE-2018-11458A vulnerability has been identified in SINUMERIK 828D V4.7 (…
• CVE-2018-11459A vulnerability has been identified in SINUMERIK 808D V4.7 (…
• CVE-2018-1146A remote unauthenticated user can enable telnet on the Belki…
• CVE-2018-11460A vulnerability has been identified in SINUMERIK 808D V4.7 (…