Siemens COMOS
COMOS uses Drawings SDK from Open Design Alliance that is affected by multiple vulnerabilities that could be triggered when the application reads files in DGN, DXF or DWG file formats. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to leak information or potentially perform remote code execution in the context of the current process. Siemens has released an update for the COMOS and recommends to update to the latest version.
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-32952US | high7.8 | — | ||
An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied d… | ||||
| CVE-2021-32950US | high7.1 | — | ||
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied… | ||||
| CVE-2021-32948US | high7.8 | — | ||
An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-suppli… | ||||
| CVE-2021-32944US | high7.8 | — | ||
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied dat… | ||||
| CVE-2021-32940US | high7.1 | — | ||
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supp… | ||||
| CVE-2021-32938US | high7.1 | — | ||
Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data.… | ||||
| CVE-2021-32936US | high7.8 | — | ||
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-sup… | ||||
| CVE-2021-32946US | high7.8 | — | ||
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper val… | ||||
| CVE-2021-31784US | high7.8 | — | ||
An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configurati… | ||||
| CVE-2021-25178US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DX… | ||||
| CVE-2021-25177US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to… | ||||
| CVE-2021-25176US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attacker… | ||||
| CVE-2021-25175US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers t… | ||||
| CVE-2021-25174US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to ca… | ||||
| CVE-2021-25173US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which al… | ||||
references
External citations — patches, advisories, analysis.
- SSA-155599: File Parsing Vulnerabilities in COMOS - CSAF Versionself
- SSA-155599: File Parsing Vulnerabilities in COMOS - PDF Versionself
- SSA-155599: File Parsing Vulnerabilities in COMOS - TXT Versionself
- ICS Advisory ICSA-22-069-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-069-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (30)
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- MitigationCOMOS
Avoid to open untrusted files from unknown sources in COMOS
- FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/ - FixedCOMOS
Update to V10.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805632/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan