Multiple vulnerabilities in Siemens COMOS

Published: 2023-11-16

Risk	Medium
Patch available	NO
Number of vulnerabilities	2
CVE-ID	CVE-2023-43505 CVE-2023-46601
CWE-ID	CWE-284
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Siemens COMOS Other software / Other software solutions
Vendor	Siemens

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU83229

Risk: Medium

CVSSv4.0: 6.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-43505

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in SMB shares. A remote user can bypass implemented security restrictions and gain unauthorized access to arbitrary files.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Siemens COMOS: All versions

CPE2.3

cpe:2.3:a:siemens:siemens_comos:*:*:*:*:*:*:*:*

External links

https://cert-portal.siemens.com/productcert/txt/ssa-137900.txt

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper access control

EUVDB-ID: #VU83230