CVE-2023-7357: FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability
Published Oct 29, 2026
·Updated
A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FlexNet Publisher lmadminto a version that resolves this vulnerability.Fixed in 11.19.4.0
Event History
Oct 29, 2026
CVE Published
via MITRE·04:38 PM
Data Sourced
via MITRE·04:38 PM
DescriptionWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable through the lmadmin web user interface. The supplied data does not state whether authentication or specific privileges are required.
2
Which release addresses the vulnerability?
FlexNet Publisher 2023 R2, version 11.19.4.0, addresses the issue.
3
What is the potential impact?
Successful exploitation can result in remote code execution. The severity data indicates high impacts to confidentiality, integrity, and availability.