Total vulnerabilities in the database
The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.
| Software | From | Fixed in |
|---|---|---|
| siemens / comos | 10.0 | 10.0.x |
| siemens / comos | 9.1 | 9.1.x |
| siemens / comos | 9.2 | 9.2.x |