Description
The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.
Advisories 1
- ICSA-13-233-01 Siemens COMOS Privilege Escalation Vulnerability CISA ICS & IT advisories · Jun 6, 2025