VULNERABILITY INTELLIGENCE

CVE-2023-46601

CVSS score9.6 CRITICAL
EPSS probability0.52%
CISA KEVNot currently listed
Published2023-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Description

A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to.

Weakness classification

  • productcert@siemens.com: CWE-284

Primary references