CISA 2026-08-13

Siemens License Server (SLS)

Machine-generated analysis · WAYSCloud LLM

Versions of Siemens License Server earlier than 5.1 and 5.3 are vulnerable to privilege escalation and path-traversal flaws.

Context

The advisory concerns Siemens License Server (SLS), a Siemens product for managing software licenses. Versions prior to 5.1 are vulnerable to a local privilege-escalation issue via an insecure sudoers policy, and versions prior to 5.3 are vulnerable to a path-traversal flaw that can expose arbitrary files. Siemens provides fixes in version 5.1 (or later) and version 5.3 (or later).

Operator considerations

Check: Verify the installed SLS version and determine if it is earlier than 5.1 or 5.3.
Patch: Update to Siemens License Server version 5.1 or later for the privilege-escalation issue and to version 5.3 or later for the path-traversal issue.

From Cybersecurity and Infrastructure Security Agency ↗

Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.

The following versions of Siemens License Server (SLS) are affected:

Siemens License Server (SLS) vers:intdot/

Read the full advisory on CISA →