Wonderware Archestra License Manager

 admin



1. EXECUTIVE SUMMARY

This video explains how to activate and deactivate a Wonderware license in online mode in AVEVA Enterprise License Manager. Learn More: https://www.se.com/a. The License Manager is browser-based and very lightweight. It can be installed on the same node as the License Server computer, or on any other node in your system. It may be used to access one, or many, installed License Servers on your system.

  • ATTENTION: Exploitable remotely/Low skill level to exploit
  • Vendor: AVEVA Software, LLC (AVEVA)
  • Equipment: Wonderware License Server
  • Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer

2. RISK EVALUATION

Successful exploitation of this vulnerability may result in remote code execution with administrative privileges.

3. TECHNICAL DETAILS

3.1 AFFECTED PRODUCTS

The following versions of Wonderware License Server use the vulnerable Flexara Imgrd (Versions 11.13.1.1 and prior):

  • Wonderware License Server v4.0.13100 and prior.

Only users with the Counted Licenses feature with “ArchestrAServer.lic” in Wonderware License Server are affected.
Wonderware License Server is delivered by:

  • Wonderware Information Server 4.0 SP1 and prior, and
  • Historian Client 2014 R4 SP2 P02 and prior.
Wonderware

3.2 VULNERABILITY OVERVIEW

3.2.1 IMPROPER RESTRICTION OF OPERATIONS WITHIN THE BOUNDS OF A MEMORY BUFFER CWE-119

Buffer overflows in lmgrd and vendor daemon in Flexera FlexNet Publisher may allow remote attackers to execute arbitrary code via a crafted packet, resulting in remote code execution with administrator privileges.

CVE-2015-8277 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

3.3 BACKGROUND

  • CRITICAL INFRASTRUCTURE SECTORS: Chemical, Critical Manufacturing, Energy, Food and Agriculture, and Water and Wastewater
  • COUNTRIES/AREAS DEPLOYED: Worldwide
  • COMPANY HEADQUARTERS LOCATION: United Kingdom

3.4 RESEARCHER

An anonymous researcher reported this vulnerability to AVEVA, who then reported it to NCCIC.

4. MITIGATIONS

Wonderware

AVEVA recommends affected users install update “Hotfix Wonderware License Server VU-485744” or later, which can be downloaded from:

https://softwaresupportsp.schneider-electric.com/#/producthub/details?id=5076 (login required)

AVEVA has published Security Bulletin LFSEC00000129. It can be found at the following location:

NCCIC recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:

  • Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.
  • Locate control system networks and remote devices behind firewalls, and isolate them from the business network.
  • When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.

NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.

No known public exploits specifically target this vulnerability.


Contact Information

For any questions related to this report, please contact the CISA at:
Email: CISAservicedesk@cisa.dhs.gov
Toll Free: 1-888-282-0870

For industrial control systems cybersecurity information: https://us-cert.cisa.gov/ics
or incident reporting: https://us-cert.cisa.gov/report

CISA continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.

This product is provided subject to this Notification and this Privacy & Use policy.

Wonderware Archestra License Manager Salary

Please share your thoughts.

We recently updated our anonymous product survey; we'd welcome your feedback.

This TechNote gives you important instructions to be performed on each platform at which you want to deploy the DIObjects to avoid having licensing issue in runtime when running new versions from DIObject , which use the new Archestra License not suitelink.lic for example DIMBTCP 3.0 sp1 and DIABCIP 5.0, inside Wonderware Application Server 3.1 SP3 Patch 1 .

Application Versions

  • Application Server 3.1 SP3 P01
  • DI MBTCP 3.0 SP1
  • DI ABCIP 5.0

OPERATING SYSTEM

Windows Server 2008 R2
SITUATION

Wonderware Archestra Manual

When running newer DASSERVER it stops periodically , getting Information message in your logger says that <DASERVER name > Please install a valid license for this DAServer product as shown in fig.1 below. trying with external demo license and getting same issue.


Figure 1: License invalid info message
SYMPTOMS

DAServer now uses the ArchestrA License Manager and the common ArchestrA license file.

If you are still using software versions that use the wwsuite.lic license file, and you do not have an ArchestrA.lic license file with the correct feature line you need to add it, you need to run InitLicense.wsf file included with the CD image to initialize the new ArchestrA Licensing sub-system.
ACTION

Wonderware Archestra License Manager Guide

If you are running Wonderware Application Server 3.1 SP3 Patch 1 or older, you must perform the following functions on each platform where you want to deploy the MBTCP DIObjects to it, Please follow below steps.

  1. Undeploy DIObjects. and close IDE.
  2. Install two Microsoft components manually.NET 4.0 Framework and Visual C++ 10.0 SP1 run-time redistributable components.
  3. Run the InitLicense.wsf file included with the CD image, fig.2, to initialize the new ArchestrA Licensing sub-system.


    Figure 2: InitLicense.wsf file in DIObject CD

    We will see license subsystem Initialization success message as shown in Figure 3 (below).


    Figure 3: License subsystem initialization success message

  4. Launch ArchestrA IDE and deploy DIObjects again.


Script in InitLicense.wsf

<job>
<script language=”VBScript”>

Set oShell = CreateObject(“WScript.Shell”)

If CInt(oShell.RegRead(“HKLMSOFTWAREMicrosoftWindows NTCurrentVersionCurrentBuildNumber”)) > 3790 Then
If WScript.Arguments.Named.Exists(“elevated”) = False Then
‘Launch the script again as administrator
CreateObject(“Shell.Application”).ShellExecute “wscript.exe”, “””” & WScript.ScriptFullName & “”” /elevated”, “”, “runas”, 1
WScript.Quit
Else
‘Change the working directory from the system32 folder back to the script抯 folder.
Set oShell = CreateObject(“WScript.Shell”)
oShell.CurrentDirectory = CreateObject(“Scripting.FileSystemObject”).GetParentFolderName(WScript.ScriptFullName)
End If
End If

Dim WSHShell, RegKey, OsType, FolderPath, ProgramFilesPath
Set WshShell = CreateObject(“WScript.Shell”)
OsType = WshShell.RegRead(“HKLMSYSTEMCurrentControlSetControlSession ManagerEnvironmentPROCESSOR_ARCHITECTURE”)

FolderPath = “Common FilesArchestrALicense”

If OsType = “x86” Then
RegKey = “HKLMSOFTWAREWonderwareLicense”
ProgramFilesPath = wshShell.ExpandEnvironmentStrings(“%PROGRAMFILES%”)
FolderPath = ProgramFilesPath + FolderPath
‘wscript.echo “Windows 32bit system detected”
Else
If OsType = “AMD64” Then
RegKey = “HKLMSOFTWAREWow6432NodeWonderwareLicense”
ProgramFilesPath = wshShell.ExpandEnvironmentStrings(“%PROGRAMFILES(x86)%”)
FolderPath = ProgramFilesPath + FolderPath
‘wscript.echo “Windows 64bit system detected”
End If
End If

WSHShell.RegWrite RegKey & “FlexLicFileDir”, FolderPath, “REG_SZ”

wscript.echo “ArchestrA Licensing sub-system initialization succeeded.”

Wonderware Archestra License Manager Duties And Responsibilities

</script>
</job>