CVE-2012-3009 Privilege escalation in n/a

What is CVE-2012-3009?

CVE-2012-3009 is a high-severity vulnerability in n/a, published on 16 Aug 2012. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.

Weakness: CWE-264

Which versions are affected by CVE-2012-3009?

It affects 1 product.

Products include Siemens Comos.

How do I fix CVE-2012-3009?

No fix has been published for CVE-2012-3009 yet. Limit exposure of the affected software until one is available.

Is CVE-2012-3009 being exploited?

There is no known exploitation of CVE-2012-3009 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-24482 Memory corruption in COMOS V10.2 Critical 10.0
• CVE-2023-43504 Memory corruption in COMOS Critical 9.6
• CVE-2023-43505 Missing authorization in COMOS Critical 9.6
• CVE-2023-46601 Missing authorization in COMOS Critical 9.6
• CVE-2021-37197 SQL injection in COMOS V10.2 High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jj22-cwv6-836v.