CVE-2023-24482 - A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25)

Back Back to CVE browser

CRITICAL

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25)

Published Feb 14, 2023

10.0

CRITICAL

CVSS 3.1

EPSS 0.81%

Description

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

Affected products

Vendor Siemens Product Comos V10.2 Default
unknown
Affected
- All versions
Vendor Siemens Product Comos V10.3.3.1 Default
unknown
Affected
- All versions < V10.3.3.1.45
Vendor Siemens Product Comos V10.3.3.2 Default
unknown
Affected
- All versions < V10.3.3.2.33
Vendor Siemens Product Comos V10.3.3.3 Default
unknown
Affected
- All versions < V10.3.3.3.9
Vendor Siemens Product Comos V10.3.3.4 Default
unknown
Affected
- All versions < V10.3.3.4.6
Vendor Siemens Product Comos V10.4.0.0 Default
unknown
Affected
- All versions < V10.4.0.0.31
Vendor Siemens Product Comos V10.4.1.0 Default
unknown
Affected
- All versions < V10.4.1.0.32
Vendor Siemens Product Comos V10.4.2.0 Default
unknown
Affected
- All versions < V10.4.2.0.25

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Siemens	Comos V10.2	unknown	Affected All versions
Siemens	Comos V10.3.3.1	unknown	Affected All versions < V10.3.3.1.45
Siemens	Comos V10.3.3.2	unknown	Affected All versions < V10.3.3.2.33
Siemens	Comos V10.3.3.3	unknown	Affected All versions < V10.3.3.3.9
Siemens	Comos V10.3.3.4	unknown	Affected All versions < V10.3.3.4.6
Siemens	Comos V10.4.0.0	unknown	Affected All versions < V10.4.0.0.31
Siemens	Comos V10.4.1.0	unknown	Affected All versions < V10.4.1.0.32
Siemens	Comos V10.4.2.0	unknown	Affected All versions < V10.4.2.0.25