{"id":"CVE-2020-10056","aliases":["EUVD-2020-2521","GHSA-wq4m-fcxw-965v"],"status":"published","title":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4)....","description":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00367,"percentile":0.30745,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-250","CWE-269"],"published":"2020-09-09T18:10:49Z","modified":"2026-06-17T02:47:16Z","products":[{"vendor":"siemens","product":"license_management_utility"},{"vendor":"siemens ag","product":"license management utility (lmu)"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-709003.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-252-03","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10056"},{"url":"https://github.com/advisories/GHSA-wq4m-fcxw-965v"}],"sources":{"cve":[{"id":"CVE-2020-10056","description":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.","status":"published","published":"2020-09-09T18:10:49Z","modified":"2024-08-04T10:50:57.816Z","cwes":["CWE-250"],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-2521","description":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.","status":"published","published":"2020-09-09T18:10:49Z","modified":"2024-08-04T10:50:57Z","updated_at":"2026-11-03T03:07:51.449946Z"}],"ghsa":[{"id":"GHSA-wq4m-fcxw-965v","title":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4)....","description":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.","status":"published","published":"2022-05-24T17:27:36Z","modified":"2023-01-31T05:06:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:49:02.986271Z"}],"nvd":[{"id":"CVE-2020-10056","description":"A vulnerability has been identified in License Management Utility (LMU) (All versions \u003c V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.","status":"published","published":"2020-09-09T19:15:18.773Z","modified":"2026-06-17T02:47:16.093Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-250","CWE-269"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}