Siemens COMOS Database Privilege Escalation Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-3009US | high8.5 | — | ||
Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspeci… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-12-227-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-227-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationCOMOS
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf - MitigationCOMOS Version 10
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf - MitigationCOMOS Version 9.1
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf - MitigationCOMOS Version 9.2
For COMOS Versions 9.1, 9.2, and 10.0, Siemens recommends installing the corresponding patches as soon as possible: Version 9.1 Patch 413, Version 9.2 Update 03 Patch 023, and Version V10 Patch 005. These software updates are available at Siemens customer support. For earlier versions, Siemens recommends upgrading to a newer version. (https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf)
https://cert-portal.siemens.com/productcert/pdf/ssa-312568.pdf
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan