Siemens COMOS Database Privilege Escalation Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-3009US | high8.5 | — | ||
Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspeci… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-12-227-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-227-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationCOMOS
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf - MitigationCOMOS Version 10
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf - MitigationCOMOS Version 9.1
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf - MitigationCOMOS Version 9.2
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan