by Kastro
Paper/Archive/CVE-2023-43505

CVE-2023-43505

Siemens COMOS — A vulnerability has been identified in COMOS (All versions).

EPSS 0.6%CVSS 9.6
critical.is priorityof 100
39
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 49.6.496 × 209.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to.

Affected

ProductAffectedFixed inSource
COMOSAll versions–CNA

Scores by source

siemens (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcert-portal.siemens.com/productcert/pdf/ssa-137900.pdf