Unscored severity · published Dec 10, 2013
CVE-2013-6840
Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors
–
CVSS
0.3%
EPSS
No
On KEV
Description
Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Comos · Siemens
9.2; 9.2.0.6.10; 10.0; 10.0.3.0.4; 10.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6840
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6840
Vendor Advisory
http://secunia.com/advisories/56010
www.securityfocus.com
http://www.securityfocus.com/bid/64153
Vendor Advisory
https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf
More from Comos
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
9.0
CVE-2021-45046
Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
9.8
CVE-2023-43504
A vulnerability has been identified in COMOS (All versions < V10.4.4)
9.8
CVE-2023-24482
A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3…
8.8
CVE-2021-37198
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS…