CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: siemens comos before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors. per: https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf

ac:m for "mitigating factors:
the attacker must have local access to the system as authenticated windows user and must have access permission for comos projects."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-12-10
Last Modified Date: 2013-12-12