CVE-2013-6840 Privilege escalation in n/a

What is CVE-2013-6840?

CVE-2013-6840 is a medium-severity vulnerability in n/a, published on 10 Dec 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.

Weakness: CWE-264

Which versions are affected by CVE-2013-6840?

It affects 1 product.

Products include Siemens Comos.

How do I fix CVE-2013-6840?

No fix has been published for CVE-2013-6840 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-6840 being exploited?

There is no known exploitation of CVE-2013-6840 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-24482 Memory corruption in COMOS V10.2 Critical 10.0
• CVE-2023-43504 Memory corruption in COMOS Critical 9.6
• CVE-2023-43505 Missing authorization in COMOS Critical 9.6
• CVE-2023-46601 Missing authorization in COMOS Critical 9.6
• CVE-2021-37197 SQL injection in COMOS V10.2 High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xc76-crcf-v554.