CVE-2013-3927

Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the database by leveraging read access...

CVE-2013-3927: Undefined Security Weakness

Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the database by leveraging read access...

PT-2013-4749

Name of the Vulnerable Software and Affected Versions Siemens COMOS versions 9.2 through 9.2.0.6.9 Siemens COMOS versions 10.0 through 10.0.3.0.3 Description The issue allows local users to obtain unintended write access to the database by leveraging read access. Recommendations For Siemens COMOS...

Siemens COMOS Privilege Escalation Vulnerability

OVERVIEW Siemens has notified ICS-CERT of a privilege escalation vulnerability in the Siemens COMOS database application. Siemens has produced a patch that mitigates this vulnerability. AFFECTED PRODUCTS The following Siemens COMOS versions are affected: All COMOS versions prior to 9.1 COMOS 9.1:...

Siemens COMOS Permissions, Privileges, and Access Controls

OVERVIEW This advisory provides mitigation details for vulnerabilities that impact the Siemens COMOS database system. Siemens has identified a permissions, privileges, and access controls vulnerability in the Siemens COMOS database system. Siemens has produced software updates that mitigate this...

CVE-2012-3009

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls...

Design/Logic Flaw

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls...

CVE-2012-3009

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls...

CVE-2012-3009

Siemens COMOS is affected by CVE-2012-3009. A privilege-escalation flaw allows remote authenticated users to obtain database administrative access via unspecified method calls. Affected versions include: all versions before 9.1, 9.1 with Patch 412/413, 9.2 with Update 3 Patch 022/023, and 10.0 wi...

PT-2012-4433

Name of the Vulnerable Software and Affected Versions Siemens COMOS versions prior to 9.1 Patch 413 Siemens COMOS versions 9.2 before Update 03 Patch 023 Siemens COMOS versions 10.0 before Patch 005 Description The issue allows remote authenticated users to obtain database administrative access...

CVE-2012-3009: Undefined Security Weakness

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls...

Siemens COMOS Database Privilege Escalation Vulnerability

Overview Siemens has reported a privilege escalation vulnerability in the Siemens COMOS database application. Siemens has produced an update that fixes this vulnerability. This vulnerability could be exploited remotely. Affected Products Siemens reports that the vulnerability affects the followin...

CVE-1999-1150

The CVE-1999-1150 entry concerns Livingston Portmaster routers running ComOS that use the same initial sequence number (ISN) for TCP connections. This reuse allows remote attackers to spoof TCP connections and hijack sessions, as described in the provided description. The vulnerability is rated C...

CVE-1999-1150: Undefined Security Weakness

Livingston Portmaster routers running ComOS use the same initial sequence number ISN for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions...