VULNERABILITY INTELLIGENCE

CVE-2023-43505

CVSS score9.6 CRITICAL
EPSS probability0.62%
CISA KEVNot currently listed
Published2023-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Description

A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to.

Weakness classification

  • productcert@siemens.com: CWE-284

Primary references