CVEvulnerability
CVE-2012-3009
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.
Affected configurations
• siemens comos (<= 9.1)
• siemens comos 9.2
• siemens comos 10.0
Related
Weakness · not in database (1)
References
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf Vendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf US Government Resource
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf Vendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf US Government Resource