External control vulnerability in Siemens Automation License Manager filename or path

Automation License Manager (ALM) centrally manages the license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for this software, the software can be used according to the end user license agreement.An external control vulnerability exists in Siemens Automation License Manager for file names or paths, which can be exploited by an unauthenticated remote attacker to rename and move files as a SYSTEM user.