1. Home
  2. CVE Database
  3. CVE-2013-4943
HIGH · 7.2

CVE-2013-4943

The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restricti...

Vulnerability Description

The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.

CVSS Score

7.2

HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
SiemensComos9.1

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2013-4943?

CVE-2013-4943 is a vulnerability with a CVSS score of 7.2 (HIGH). The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restricti...

How severe is CVE-2013-4943?

CVE-2013-4943 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-4943?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Comos.