V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2019-04228
BDU
High

Уязвимость компонента lmgrd и компонентов демона вендора менеджера лицензий FlexNet Publisher связана с возможностью удаления элементов в с…

CVSS
7.5
High
EPSS
0.00
p0
Published
2019-01-01
Updated
2019-01-01
Description

Уязвимость компонента lmgrd и компонентов демона вендора менеджера лицензий FlexNet Publisher связана с возможностью удаления элементов в сервисе lmadmin. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Tags · CWE
Pre-auth
Affected products
Flexera software Flexnet publisherSchneider electric Ecostruxure control expertSchneider electric Ecostruxure hybrid distributed control systemSchneider electric Ecostruxure machine expertSchneider electric Ecostruxure power monitoring expertSchneider electric Floating license managerSchneider electric Floating license managerSchneider electric Floating license managerSchneider electric Floating license managerSchneider electric Floating license managerSchneider electric Floating license managerSchneider electric Floating license managerSchneider electric Powerscada expertSchneider electric Somachine motion floating variant
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
2019-01-01
Published
2019-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Schneider Electric
Ecostruxure Control ExpertEcostruxure Power Monitoring ExpertEcostruxure Machine ExpertEcostruxure Hybrid Distributed Control SystemPowerscada ExpertFloating License ManagerSomachine Motion Floating Variant
Flexera Software
Flexnet Publisher
ProductVendorStatus
flexnet publisherflexera softwareTracked
ecostruxure control expertschneider electricTracked
ecostruxure hybrid distributed control systemschneider electricTracked
ecostruxure machine expertschneider electricTracked
ecostruxure power monitoring expertschneider electricTracked
floating license managerschneider electricTracked
floating license managerschneider electricTracked
floating license managerschneider electricTracked
floating license managerschneider electricTracked
floating license managerschneider electricTracked
floating license managerschneider electricTracked
floating license managerschneider electricTracked
powerscada expertschneider electricTracked
somachine motion floating variantschneider electricTracked
Source databases
BDU
Related vulnerabilities
CVE-2018-20031