by Kastro
Paper/Archive/CVE-2023-24482

CVE-2023-24482

Siemens COMOS V10.2 — A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All ve…

EPSS 0.8%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 56.9.569 × 2011.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

Affected

ProductAffectedFixed inSource
COMOS V10.2All versions–CNA
COMOS V10.3.3.1All versions < V10.3.3.1.45–CNA
COMOS V10.3.3.2All versions < V10.3.3.2.33–CNA
COMOS V10.3.3.3All versions < V10.3.3.3.9–CNA
COMOS V10.3.3.4All versions < V10.3.3.4.6–CNA
COMOS V10.4.0.0All versions < V10.4.0.0.31–CNA
COMOS V10.4.1.0All versions < V10.4.1.0.32–CNA
COMOS V10.4.2.0All versions < V10.4.2.0.25–CNA

Scores by source

siemens (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcert-portal.siemens.com/productcert/pdf/ssa-693110.pdf