Which versions of Siemens License Server are affected by EUVD-2026-56125?

Siemens License Server versions prior to V5.1 contain a local privilege escalation vulnerability enabling full system compromise, creating immediate risk for organizations managing software licenses…

How to fix or mitigate EUVD-2026-56125?

Within 24 hours, conduct inventory of all Siemens License Server deployments to identify systems running pre-V5.1 versions, with particular focus on shared infrastructure and multi-user environments. Within 7 days, implement access restrictions through host-based controls enforcing principle of least privilege, audit and remediate sudoers policies to remove overly permissive command execution rights, activate audit logging for privilege escalation attempts, and isolate SLS servers from general-purpose user access networks. Within 30 days, establish ongoing monitoring of Siemens security advisories for V5.1 patch release and availability testing, develop and test upgrade procedures, and schedule SLS instance upgrades to patched versions upon release.

Siemens License Server EUVD-2026-56125

Q: What is the CVSS score of EUVD-2026-56125?

EUVD-2026-56125 has a CVSS 4.0 base score of 8.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-69108 HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-08-11 siemens

GHSA-gc42-c48g-89rf

Privilege Escalation Siemens Siemens License Server Sls

8.3

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

8.3 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.9 HIGH

Local vector and high prior privileges required per sudoers context; scope changes to root; no availability impact per vendor assessment.

3.1 AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Aug 11, 2026 - 13:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 11, 2026 - 13:22 vuln.today

cvss_changed

Severity Changed

Aug 11, 2026 - 13:22 NVD

MEDIUM HIGH

CVSS changed

Aug 11, 2026 - 13:22 NVD

6.0 (MEDIUM) 8.3 (HIGH)

Analysis Generated

Aug 11, 2026 - 13:19 vuln.today

DescriptionCVE.org

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.

AnalysisAI

Local privilege escalation in Siemens License Server (SLS) versions prior to V5.1 allows a local attacker with elevated operating system privileges to execute arbitrary commands and write malicious files as root, resulting in full system compromise. The root cause is an insecure sudoers policy (CWE-732) that grants overly permissive command execution rights, enabling abuse of sudo rules to break out of intended privilege boundaries. No public exploit code or CISA KEV listing has been identified at time of analysis, but the high-integrity and high-confidentiality impact on the vulnerable system underscores urgency for organizations running SLS in multi-user or shared infrastructure environments.

Technical ContextAI

Siemens License Server (SLS) is Siemens' software license management solution, identified by CPE cpe:2.3:a:siemens:siemens_license_server_(sls):*:*:*:*:*:*:*:*. The vulnerability is rooted in CWE-732 (Incorrect Permission Assignment for Critical Resource), which in this context means the application's sudoers configuration grants a user or service account the ability to execute one or more commands as root without sufficient restriction - for example, allowing wildcards, writable script paths, or commands with shell-escape functionality. An attacker who controls a local account covered by the misconfigured sudoers rule can leverage allowed sudo invocations to spawn a root shell, write to privileged file locations, or install persistent malware. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:H/UI:N) confirms the attack is local, requires no special attack requirements beyond the privilege level, and demands no user interaction once the attacker has the necessary account access.

RemediationAI

The primary fix is to upgrade Siemens License Server (SLS) to version V5.1 or later, which contains a corrected sudoers policy. The Siemens product security advisory SSA-077553 at https://cert-portal.siemens.com/productcert/html/ssa-077553.html should be consulted for official upgrade instructions and any additional mitigations. If immediate upgrade is not feasible, administrators should manually audit and restrict the /etc/sudoers file (or files under /etc/sudoers.d/) to remove or tighten any rules granted to the SLS service account or associated user accounts - specifically removing wildcard entries, eliminating NOPASSWD rules for commands with shell-escape potential, and replacing broad command grants with the minimal necessary invocations. Note that modifying sudoers incorrectly can lock out administrative access; use 'visudo' for syntax validation before saving changes. Additionally, restrict local OS-level access to the SLS host to only those personnel who require it, reducing the set of accounts that could be leveraged for escalation.