← Back

CVE-2023-24482

nvd nist
Published: Feb 14, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

Affected (7)

Products: Siemens: Comos
1 product
Comos
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
From 10.2 to 10.3.3.1.45
From 10.3.3.2 to 10.3.3.2.33
From 10.3.3.3 to 10.3.3.3.9
From 10.3.3.4 to 10.3.3.4.6
From 10.4.0.0 to 10.4.0.0.31
From 10.4.1.0 to 10.4.1.0.32
From 10.4.2.0 to 10.4.2.0.25

References (2)

Source: productcert@siemens.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.