Siemens COMOS Permissions, Privileges, and Access Controls
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-3927US | medium4.6 | — | ||
Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the databa… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-13-169-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-169-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationCOMOS 10.0
Siemens has produced software updates, 9.2.0.6.10 for Version 9.2 and 10.0.3.0.4 for Version 10.0, that resolve this vulnerability. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the software updates.
- MitigationCOMOS 9.2
Siemens has produced software updates, 9.2.0.6.10 for Version 9.2 and 10.0.3.0.4 for Version 10.0, that resolve this vulnerability. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the software updates.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan