PT-2013-5291 · Siemens · Comos
Published
2013-08-09
·
Updated
2013-08-13
·
CVE-2013-4943
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Siemens COMOS versions prior to 9.1 Update 458
Siemens COMOS versions 9.2 prior to 9.2.0.6.37
Siemens COMOS versions 10.0 prior to 10.0.3.0.19
Description
The issue allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.
Recommendations
For versions prior to 9.1 Update 458, update to version 9.1 Update 458 or later.
For versions 9.2 prior to 9.2.0.6.37, update to version 9.2.0.6.37 or later.
For versions 10.0 prior to 10.0.3.0.19, update to version 10.0.3.0.19 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Comos