Siemens Comos vulnerabilities

CVE-2023-43504 [CRITICAL] CWE-120 CVE-2023-43504: A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for t A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

CVE-2023-46601 [CRITICAL] CWE-284 CVE-2023-46601: A vulnerability has been identified in COMOS (All versions). The affected application lacks proper a A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to.

CVE-2023-43503 [LOW] CWE-319 CVE-2023-43503: A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affecte A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP.

CVE-2023-43505 [CRITICAL] CWE-284 CVE-2023-43505: A vulnerability has been identified in COMOS (All versions). The affected application lacks proper a A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to.

CVE-2023-24482 [CRITICAL] CWE-120 CVE-2023-24482: A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), CO

CVE-2021-37194 [HIGH] CWE-434 CVE-2021-37194: A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), C A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS allows to upload and store arbitrary files at the webserver. This could allow a

CVE-2021-37197 [HIGH] CWE-89 CVE-2021-37197: A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), C A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS is vulnerable to SQL injections. This could allow an attacker to execute arbitra

CVE-2021-37198 [HIGH] CWE-352 CVE-2021-37198: A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), C A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS uses a flawed implementation of CSRF prevention. An attacker could exploit this

CVE-2021-37196 [MEDIUM] CWE-23 CVE-2021-37196: A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), C A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions = V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS unpacks specially crafted archive files to relative paths. This vulnerability

CVE-2021-37195 [MEDIUM] CWE-80 CVE-2021-37195: A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), C A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS accepts arbitrary code as attachment to tasks. This could allow an attacker to

CVE-2021-44228 [CRITICAL] CWE-20 CVE-2021-44228: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LD

CVE-2021-32936 [HIGH] CWE-787 CVE-2021-32936: An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All ve An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the c

CVE-2021-32948 [HIGH] CWE-787 CVE-2021-32948: An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versi An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the curr

CVE-2021-32944 [HIGH] CWE-416 CVE-2021-32944: A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions pr A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service condition or execute code in the context of the curren

CVE-2021-32938 [HIGH] CWE-125 CVE-2021-32938: Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing o Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service condition or read sensitive information from memory.

CVE-2021-32952 [HIGH] CWE-787 CVE-2021-32952: An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2 An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or execute code in the context of the current

CVE-2021-32950 [HIGH] CWE-125 CVE-2021-32950: An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of-service condition or read sensitive information from memory loc

CVE-2021-32940 [HIGH] CWE-125 CVE-2021-32940: An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All ver An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-service condition or read sensitive information from memory

CVE-2021-32946 [HIGH] CWE-754 CVE-2021-32946: An improper check for unusual or exceptional conditions issue exists within the parsing DGN files fr An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the con

CVE-2021-31784 [HIGH] CWE-787 CVE-2021-31784: An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Dr An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.