CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

214 matches found

NVD•added 2023/02/14 11:15 a.m.•40 views

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

10CVSS9.7AI score0.00813EPSS

SaveExploits0References1

Prion•added 2023/02/14 11:15 a.m.•23 views

Design/Logic Flaw

7.5CVSS9.6AI score0.00813EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/02/14 10:36 a.m.•16 views

CVE-2023-24482

10CVSS9.6AI score0.00813EPSS

SaveExploits0References1

Cvelist•added 2023/02/14 10:36 a.m.•44 views

CVE-2023-24482

10CVSS9.7AI score0.00813EPSS

SaveExploits0References1

CVE•added 2023/02/14 10:36 a.m.•90 views

CVE-2023-24482

CVE-2023-24482 affects Siemens COMOS, with SEH-based buffer overflow in the Cache validation service across V10.2 all versions through V10.4.2.0.25 (and older subreleases prior to fixed builds). Exploitation could lead to remote arbitrary code execution or denial of service. Siemens/Siemens Produ...

10CVSS9.6AI score0.00813EPSS

SaveExploits0References1Affected Software1

Positive Technologies•added 2023/02/14 12:00 a.m.•5 views

PT-2023-1387

Name of the Vulnerable Software and Affected Versions COMOS V10.2 All versions COMOS V10.3.3.1 versions prior to V10.3.3.1.45 COMOS V10.3.3.2 versions prior to V10.3.3.2.33 COMOS V10.3.3.3 versions prior to V10.3.3.3.9 COMOS V10.3.3.4 versions prior to V10.3.3.4.6 COMOS V10.4.0.0 versions prior t...

10CVSS0.00813EPSS

SaveExploits0References5

NCSC•added 2023/02/14 12:00 a.m.•120 views

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in Scalance, among others, TIA, SiPass, SIMATIC, COMOS, Brownfield, JT Open Toolkit, Mendix, RuggedCom and Solid Edge. The vulnerabilities would allow a malicious potentially able to launch attacks that result in the following categories of damage:...

10CVSS7.4AI score0.82612EPSS

SaveExploits7

ICS•added 2023/02/14 12:00 a.m.•60 views

Siemens COMOS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

10CVSS9.8AI score0.00813EPSS

SaveExploits0References11

Rapid7 Vulnerability Database (full)•added 2023/02/14 12:00 a.m.•8 views

CVE-2023-24482: Buffer Copy without Checking Size of Input

10CVSS6.7AI score0.00813EPSS

SaveExploits0References2

CNNVD•added 2023/02/14 12:00 a.m.•18 views

Siemens Comos security vulnerabilities

Siemens Comos is a plant engineering software solution from Siemens, a German company. Siemens Comos, used in the process industry, is vulnerable to a buffer overflow vulnerability that stems from a boundary error when handling untrusted input. An attacker could use this vulnerability to execute...

10CVSS8AI score0.00813EPSS

SaveExploits0References4

ICS•added 2022/03/08 12:00 a.m.•103 views

Siemens COMOS

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: COMOS Vulnerabilities: Memory Allocation with Excessive Size Value, Untrusted Pointer Dereference, Type Confusion, Stack-based Buffer Overflow, Out-of-bounds Write, Out-of-bounds Read, Use After Free,...

7.8CVSS9AI score0.0337EPSS

SaveExploits0References11

CNVD•added 2022/02/13 12:00 a.m.•75 views

Siemens Comos code issue vulnerability

Siemens Comos is a plant engineering software solution from Siemens, a German company. A code issue vulnerability exists in Siemens Comos version V10.2, which stems from the COMOS Web component of COMOS allowing the upload and storage of arbitrary files on a Web server. An attacker could exploit...

7.5CVSS4AI score0.00847EPSS

SaveExploits0References1

attackerkb•added 2022/02/09 4:15 p.m.•14 views

CVE-2021-37194

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS allows to upload and store...

7.5CVSS7AI score0.00847EPSS

SaveExploits0References2

osv_cve•added 2022/02/09 4:15 p.m.•22 views

CVE-2021-37194

7.5CVSS7.1AI score0.00847EPSS

SaveExploits0References1

NVD•added 2022/02/09 4:15 p.m.•57 views

CVE-2021-37194

7.5CVSS0.00847EPSS

SaveExploits0References1

Prion•added 2022/02/09 4:15 p.m.•38 views

Design/Logic Flaw

5CVSS7.6AI score0.00847EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2022/02/09 3:16 p.m.•41 views

CVE-2021-37194

7.5AI score0.00847EPSS

SaveExploits0References1

CVE•added 2022/02/09 3:16 p.m.•120 views

CVE-2021-37194

CVE-2021-37194 affects Siemens COMOS, specifically the COMOS Web component. The vulnerability arises from an unrestricted upload mechanism that allows uploading and storing arbitrary files on the web server, enabling attackers to place malicious files. Affected are COMOS Web-enabled deployments: ...

7.5CVSS7.3AI score0.00847EPSS

SaveExploits0References1Affected Software1

CNNVD•added 2022/02/09 12:00 a.m.•20 views

Siemens Comos code-related vulnerabilities

7.5CVSS5.9AI score0.00847EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2022/02/09 12:00 a.m.•7 views

CVE-2021-37194: Unrestricted Upload of File with Dangerous Type

7.5CVSS7AI score0.00847EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by