SSA-137900: Multiple Vulnerabilities in COMOS
COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released an update for COMOS and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-46601US | high7.5 | — | ||
A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker… | ||||
| CVE-2023-43505US | medium6.5 | — | ||
A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that… | ||||
| CVE-2023-43504US | critical9.8 | — | ||
A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structu… | ||||
| CVE-2023-43503US | high7.5OT erhöht | — | ||
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information i… | ||||
| CVE-2023-2932US | high8.8 | — | ||
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity:… | ||||
| CVE-2023-2931US | high8.8 | — | ||
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity:… | ||||
| CVE-2023-22670US | high7.8 | — | ||
A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files.… | ||||
| CVE-2023-22669US | high7.8 | — | ||
Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length he… | ||||
| CVE-2023-1530US | high8.8 | — | ||
Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
| CVE-2023-0933US | high8.8 | — | ||
Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severit… | ||||
| CVE-2022-28809US | high7.8OT erhöht | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a re… | ||||
| CVE-2022-28808US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading DWG files in a recovery mode. An attacker can le… | ||||
| CVE-2022-28807US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery… | ||||
| CVE-2022-23095US | high7.8 | — | ||
Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can lev… | ||||
| CVE-2020-35460US | medium5.3 | Exploit | ||
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations. | ||||
| CVE-2020-25020US | critical9.8 | — | ||
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (32)
- MitigationCOMOS
CVE-2023-43505, CVE-2023-46601: Use an application server like Citrix which builds an additional layer of access control around COMOS. The file share with the documents folder and the database should be only accessible by the application server. You can find further recommendations in the COMOS manual “Securityrelevant configuration” in COMOS documentation ( https://support.industry.siemens.com/cs/document/109823629/)
- MitigationCOMOS
CVE-2023-43505, CVE-2023-46601: Use an application server like Citrix which builds an additional layer of access control around COMOS. The file share with the documents folder and the database should be only accessible by the application server. You can find further recommendations in the COMOS manual “Securityrelevant configuration” in COMOS documentation ( https://support.industry.siemens.com/cs/document/109823629/)
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- MitigationCOMOS
Ensure all files imported into COMOS originate from a trusted source and transmitted are over secure channels
- Kein Fix geplantCOMOS
Currently no fix is planned
- Kein Fix geplantCOMOS
Currently no fix is planned
- BehobenCOMOS
For CVE-2023-43503, update to V10.4.4 or later version and update the COMOS database to version 25. (See “Data maintenance: Modifying the version” in the user manual. Warning: After the update, the database cannot be used by older COMOS versions)
- BehobenCOMOS
For CVE-2023-43504, delete ptmcast.exe from bin folder of COMOS installation directory. Installations from COMOS V10.4.4 or later version does not contain ptmcast.exe
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
- BehobenCOMOS
Update to V10.4.4 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan