Riskcovery

CVE-2023-24482

State
Published
Severity
10.0 Critical
Published
Feb 14, 2023
Updated
Mar 20, 2025
Reserved
Jan 24, 2023

Read the record on cve.org

Description

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

Scores

CVSSScoreVectorSource
3.110.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

ProductVersions
COMOS V10.2Siemens
  • All versionsAffected
COMOS V10.3.3.1Siemens
  • All versions < V10.3.3.1.45Affected
COMOS V10.3.3.2Siemens
  • All versions < V10.3.3.2.33Affected
COMOS V10.3.3.3Siemens
  • All versions < V10.3.3.3.9Affected
COMOS V10.3.3.4Siemens
  • All versions < V10.3.3.4.6Affected
COMOS V10.4.0.0Siemens
  • All versions < V10.4.0.0.31Affected
COMOS V10.4.1.0Siemens
  • All versions < V10.4.1.0.32Affected
COMOS V10.4.2.0Siemens
  • All versions < V10.4.2.0.25Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.