PT-2023-1387 · Siemens · Comos
Published
2023-02-14
·
Updated
2023-02-22
·
CVE-2023-24482
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
COMOS V10.2 (All versions)
COMOS V10.3.3.1 versions prior to V10.3.3.1.45
COMOS V10.3.3.2 versions prior to V10.3.3.2.33
COMOS V10.3.3.3 versions prior to V10.3.3.3.9
COMOS V10.3.3.4 versions prior to V10.3.3.4.6
COMOS V10.4.0.0 versions prior to V10.4.0.0.31
COMOS V10.4.1.0 versions prior to V10.4.1.0.32
COMOS V10.4.2.0 versions prior to V10.4.2.0.25
Description
A vulnerability has been identified in the cache validation service of COMOS, which is vulnerable to a Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause a denial of service condition. The vulnerability is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code.
Recommendations
For COMOS V10.2, update to a version outside of the affected range.
For COMOS V10.3.3.1, update to version V10.3.3.1.45 or later.
For COMOS V10.3.3.2, update to version V10.3.3.2.33 or later.
For COMOS V10.3.3.3, update to version V10.3.3.3.9 or later.
For COMOS V10.3.3.4, update to version V10.3.3.4.6 or later.
For COMOS V10.4.0.0, update to version V10.4.0.0.31 or later.
For COMOS V10.4.1.0, update to version V10.4.1.0.32 or later.
For COMOS V10.4.2.0, update to version V10.4.2.0.25 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Comos