CVE-2020-7583: siemens ag automation license manager 5 Improper Authorization
Vulnerability summary
CVE-2020-7583 is a high (CVSS 7.8) Improper Authorization vulnerability in siemens ag automation license manager 5. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.7% of scored vulnerabilities.
Timeline
- 14-08-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify files that should be protected against writing.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-285Improper AuthorizationThe product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Affected systems
Siemens ag2 products
- automation license manager 5All versions (No fix recorded)
- automation license manager 6All versions < V6.0.8
Siemens1 product
- automation_license_manager≥ 5.0.0, < 6.0.8
2 vendors · 3 products