description: A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to.
problem types: CWE-284: Improper Access Control
affected:
{
vendor: Siemens
product: COMOS
versions:
version: All versions, status: affected
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
baseScore: 9.6
baseSeverity: CRITICAL
]