CVE-2013-6840

Siemens COMOS contains a local privilege-escalation vulnerability (CVE-2013-6840) that could let authenticated local users gain database privileges. Affected products are COMOS versions prior to 9.2.0.8.1, 10.0 prior to 10.0.3.1.40, and 10.1 prior to 10.1.0.0.2. The vectors are unspecified in the...

Siemens COMOS Privilege Escalation

OVERVIEW Siemens notified NCCIC/ICS-CERT of a privilege escalation vulnerability in the Siemens COMOS database application. An update has been produced by Siemens and is available to resolve the vulnerability. The client application used for accessing the database system might allow authenticated...