« Volver al listado

CVE-2013-6840

Estado: ModificadaMedia (6.9)—

Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Siemens — Comos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6840",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-10T16:55:25.853",
  "references": [
    {
      "url": "http://secunia.com/advisories/56010",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/64153",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/56010",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64153",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Siemens COMOS anterior a la versión 9.2.0.8.1, 10.0 anterior a 10.0.3.1.40, y 10.1 anterior a la versión 10.1.0.0.2 permite a usuarios locales obtener privilegios en la base de datos a través de vectores sin especificar."
    }
  ],
  "lastModified": "2026-06-17T00:01:01.717",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:comos:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F3343B0-D106-488F-859B-855A1A848A3E"
            },
            {
              "criteria": "cpe:2.3:a:siemens:comos:9.2.0.6.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDA6098A-25A7-4340-A333-7CF81A894510"
            },
            {
              "criteria": "cpe:2.3:a:siemens:comos:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACCFB2A5-EFEC-4AD0-9A9F-67106F1FFF09"
            },
            {
              "criteria": "cpe:2.3:a:siemens:comos:10.0.3.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0FDD766-2351-44E0-9EDB-F9C2A9B91622"
            },
            {
              "criteria": "cpe:2.3:a:siemens:comos:10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7941BCA-1DDD-4DAE-BB72-1AA56FF61CE1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf\n\nAC:M for \"Mitigating factors:\nThe attacker must have local access to the system as authenticated Windows user and must have access permission for COMOS projects.\"",
  "sourceIdentifier": "cve@mitre.org"
}