PT-2012-4433 · Siemens · Comos

Published 2012-08-16 · Updated 2012-08-16 · CVE-2012-3009

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens COMOS versions prior to 9.1 Patch 413 Siemens COMOS versions 9.2 before Update 03 Patch 023 Siemens COMOS versions 10.0 before Patch 005

Description The issue allows remote authenticated users to obtain database administrative access.

Recommendations For versions prior to 9.1 Patch 413, update to 9.1 Patch 413 or later. For versions 9.2 before Update 03 Patch 023, update to 9.2 Update 03 Patch 023 or later. For versions 10.0 before Patch 005, update to 10.0 Patch 005 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-3009

Affected Products

Comos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-3009 · Security Note
• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf · Vendor Advisory
• http://us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf · Note