CVE-2013-4943: Siemens Comos

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.

Affected products

• Siemens Comos: version 9.1 only; version 9.2 only; version 10.0 only

Published 2013-08-09. Last modified 2026-06-16.