CVE-2023-24482

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
9.8CRITICAL
EPSS
1.1%
top 21.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Siemens ComosSiemens Comos V10.2Siemens Comos V10.3.3.1+6 more
Timeline
PublishedFeb 14

Description

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflo…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 3.9 | Impact: 6.0

Affected Packages9 packages

▶NVDsiemens/comos10.2 — 10.3.3.1.45+6
▶CVEListV5siemens/comos_v10.2All versions
▶CVEListV5siemens/comos_v10.3.3.1All versions < V10.3.3.1.45
▶CVEListV5siemens/comos_v10.3.3.2All versions < V10.3.3.2.33
▶CVEListV5siemens/comos_v10.3.3.3All versions < V10.3.3.3.9

🔴Vulnerability Details

2
CVEList
CVE-2023-24482: A vulnerability has been identified in COMOS V10↗2023-02-14
▶
GHSA
GHSA-jq98-78qg-f4vf: A vulnerability has been identified in COMOS V10↗2023-02-14
▶