Database Authorization Flaw in Siemens COMOS
CVE-2012-3009

Currently unrated

Key Information:

Vendor
Siemens
Status
Comos
Vendor
CVE Published:
16 August 2012

Summary

A vulnerability in Siemens COMOS prior to specific patches allows remote authenticated users to gain unauthorized database administrative access through unspecified method calls, posing a significant risk to system integrity and confidentiality.

References

http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01...
x_refsource_MISC
http://www.siemens.com/corporate-technology/pool/de/forsc...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.