CVE-2023-46601: Critical severity comos vulnerability
A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46601?
The severity of CVE-2023-46601 is critical with a severity value of 9.6.
What is the affected software for CVE-2023-46601?
The affected software for CVE-2023-46601 is Siemens COMOS.
What is the vulnerability description of CVE-2023-46601?
CVE-2023-46601 is a vulnerability in COMOS that lacks proper access controls in making the SQLServer connection, allowing attackers to query the database directly and access unauthorized information.
How can I fix CVE-2023-46601?
To fix CVE-2023-46601, it is recommended to apply the necessary updates or patches provided by Siemens.
Where can I find more information about CVE-2023-46601?
More information about CVE-2023-46601 can be found at the Siemens CERT-Portal website: https://cert-portal.siemens.com/productcert/pdf/ssa-137900.pdf