CVE-2013-3927

{"id": "CVE-2013-3927", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-06-18T18:55:09.350", "references": [{"url": "http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-194865.pdf", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the database by leveraging read access."}, {"lang": "es", "value": "Vulnerabilidad no especificada en la biblioteca de cliente de Siemens COMOS v9.2 anterior a v9.2.0.6.10 y v10.0 anterior a v10.0.3.0.4 permite a usuarios locales obtener acceso de escritura no deseado a la base de datos mediante el aprovechamiento del acceso de lectura."}], "lastModified": "2013-06-19T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:comos:9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F3343B0-D106-488F-859B-855A1A848A3E"}, {"criteria": "cpe:2.3:a:siemens:comos:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACCFB2A5-EFEC-4AD0-9A9F-67106F1FFF09"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}