Siemens COMOS Privilege Escalation Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-4943US | high7.2 | — | ||
The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-13-233-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-233-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationCOMOS
Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)
- MitigationCOMOS 10.0
Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)
- MitigationCOMOS 9.1
Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)
- MitigationCOMOS 9.2
Siemens provides the following updates for COMOS Versions 9.1, 9.2, and 10.0 that resolves this vulnerability: COMOS v9.1 use patch LyraUpdate458 (Update 458), COMOS v9.2 use patch V092_Upd06_Patch037 (9.2.0.6.37), COMOS v10.0 use patch V100_SP03_Patch019 (10.0.3.0.19)
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan