CVE-2012-3009 - Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls

Back Back to CVE browser

HIGH

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls

Published Aug 16, 2012

8.5

HIGH

CVSS 2.0

EPSS 2.15%

Description

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf
x_refsource_CONFIRMVendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf
x_refsource_MISCUS Government Resource

Link	Providers	Tags
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-312568.pdf		x_refsource_CONFIRMVendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-227-01.pdf		x_refsource_MISCUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Aug 16, 2012

Updated Sep 17, 2024

Reserved May 30, 2012

Link CVE-2012-3009

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-3009

Red Hat

Severity n/a

Public date n/a

Links CVE-2012-3009