CVEvulnerability

CVE-2013-4943

7.2 HIGH Published 2013-08-09 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-08-09
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-264

Description

The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.

Affected configurations

• siemens comos 9.1 • siemens comos 9.2 • siemens comos 10.0

Weakness · not in database (1)

CWE-264

References

http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-970879.pdf Vendor Advisory
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-970879.pdf Vendor Advisory

CVE-2013-4943

Description

Affected configurations

Related

Weakness · not in database (1)

References