EUVD-2021-23770

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerability in COMOS web components allows file storage in accessible folders via crafted archives.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-37196	11 Jan 202214:15	–	circl
CNNVD	Siemens Comos 路径遍历漏洞	11 Jan 202200:00	–	cnnvd
CNVD	Siemens COMOS Web Component Path Traversal Vulnerability	12 Jan 202200:00	–	cnvd
CVE	CVE-2021-37196	11 Jan 202211:27	–	cve
Cvelist	CVE-2021-37196	11 Jan 202211:27	–	cvelist
ICS	Siemens COMOS Web (Update A)	11 Jan 202200:00	–	ics
NVD	CVE-2021-37196	11 Jan 202212:15	–	nvd
OSV	CVE-2021-37196	11 Jan 202212:15	–	osv
Prion	Design/Logic Flaw	11 Jan 202212:15	–	prion
RedhatCVE	CVE-2021-37196	22 May 202518:40	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "9bbdd2f3-7463-3393-a756-e5fffdb26cb5",
        "vendor": {
          "name": "Siemens"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1f449ac4-043f-35cb-99ed-0aee32c408eb",
        "product": {
          "name": "COMOS V10.3"
        },
        "product_version": "All versions < V10.3.3.3 only if web components are used"
      },
      {
        "id": "4e821174-07eb-33a8-97e2-54d6b1f032d5",
        "product": {
          "name": "COMOS V10.3"
        },
        "product_version": "All versions  V10.3.3.3 only if web components are used"
      },
      {
        "id": "65f77593-48a8-3021-a409-bb41183b073f",
        "product": {
          "name": "COMOS V10.4"
        },
        "product_version": "All versions < V10.4.1 only if web components are used"
      },
      {
        "id": "9eef6618-8442-33de-b2d7-20f1ff648795",
        "product": {
          "name": "COMOS V10.2"
        },
        "product_version": "All versions only if web components are used"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-995338.pdf
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

CVSS 23.5

EPSS0.00782