Lucene search

[email protected]CVE-2013-6840

HistoryDec 10, 2013 - 4:55 p.m.

CVE-2013-6840

2013-12-1016:55:00

CWE-264

[email protected]

web.nvd.nist.gov

siemens

comos

cve-2013-6840

security vulnerability

database privileges

6.8 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.

CPENameOperatorVersion
siemens:comossiemens comoseq10.0
siemens:comossiemens comoseq10.0.3.0.4
siemens:comossiemens comoseq9.2.0.6.10
siemens:comossiemens comoseq9.2
siemens:comossiemens comoseq10.1

CPE	Name	Operator	Version
siemens:comos	siemens comos	eq	10.0
siemens:comos	siemens comos	eq	10.0.3.0.4
siemens:comos	siemens comos	eq	9.2.0.6.10
siemens:comos	siemens comos	eq	9.2
siemens:comos	siemens comos	eq	10.1

References

secunia.com/advisories/56010

www.securityfocus.com/bid/64153

www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf

6.8 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2013-6840

ics1 prion1 cvelist1