CVE-2023-43505

A vulnerability has been identified in COMOS All versions. The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to...

CVE-2023-43505

CVE-2023-43505 affects Siemens COMOS (all versions) with an impaired access-control mechanism on SMB shares, enabling an attacker to access files beyond the user’s rights. The root cause is improper SMB access control in COMOS. Impact is high for confidentiality (C:H) with network access and low ...