PT-2012-4433 · Siemens · Comos

Publicado 2012-08-16 · Atualizado 2012-08-16 · CVE-2012-3009

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens COMOS versions prior to 9.1 Patch 413 Siemens COMOS versions 9.2 before Update 03 Patch 023 Siemens COMOS versions 10.0 before Patch 005

Description The issue allows remote authenticated users to obtain database administrative access.

Recommendations For versions prior to 9.1 Patch 413, update to 9.1 Patch 413 or later. For versions 9.2 before Update 03 Patch 023, update to 9.2 Update 03 Patch 023 or later. For versions 10.0 before Patch 005, update to 10.0 Patch 005 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3009

Produtos afetados

Comos

Referências · 3

• http://us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3009 · Nota de Segurança
• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf · Aviso do Fabricante