CVE-2023-24482

criticalPriorität · verfolgen · 39EPSS 0.008 · 57. PerzentilDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.81% (57th) EPSS
CVSS 9.8 · critical
Is it mine?
46 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenCOMOS V10.3.3.1siemens_psirt

    Update to V10.3.3.1.45 or later version

  • BehobenCOMOS V10.3.3.2siemens_psirt

    Update to V10.3.3.2.33 or later version

  • BehobenCOMOS V10.3.3.3siemens_psirt

    Update to V10.3.3.3.9 or later version

  • BehobenCOMOS V10.3.3.4siemens_psirt

    Update to V10.3.3.4.6 or later version

  • BehobenCOMOS V10.4.0.0siemens_psirt

    Update to V10.4.0.0.31 or later version

  • BehobenCOMOS V10.4.1.0siemens_psirt

    Update to V10.4.1.0.32 or later version

  • BehobenCOMOS V10.4.2.0siemens_psirt

    Update to V10.4.2.0.25 or later version

  • BehobenCOMOS V10.3.3.1cisa_csaf_ot

    Update to V10.3.3.1.45 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • BehobenCOMOS V10.3.3.2cisa_csaf_ot

    Update to V10.3.3.2.33 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • BehobenCOMOS V10.3.3.3cisa_csaf_ot

    Update to V10.3.3.3.9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • BehobenCOMOS V10.3.3.4cisa_csaf_ot

    Update to V10.3.3.4.6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • BehobenCOMOS V10.4.0.0cisa_csaf_ot

    Update to V10.4.0.0.31 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • BehobenCOMOS V10.4.1.0cisa_csaf_ot

    Update to V10.4.1.0.32 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • BehobenCOMOS V10.4.2.0cisa_csaf_ot

    Update to V10.4.2.0.25 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109815702/
  • MitigationCOMOS V10.2siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.1siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.2siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.3siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.4siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.4.0.0siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.4.1.0siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.4.2.0siemens_psirt

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.2cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.1cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.2cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.3cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.3.3.4cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.4.0.0cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.4.1.0cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • MitigationCOMOS V10.4.2.0cisa_csaf_ot

    Enable Structured Exception Handling Overwrite Protection (SEHOP) in your Windows Operating System where COMOS is installed to protect against code execution. However, the application is still vulnerable to denial of service attacks

  • Kein Fix geplantCOMOS V10.2siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantCOMOS V10.2cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.110criticalAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU
v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 3.9 · Auswirkung 6
v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-120USCWE-120USCWE-120USCWE-120US
05

betroffene Produkte (46)

Betroffene Produkte und Versionsbereiche.

20 von 46 angezeigt
06

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-693110SSA-693110: Buffer Overflow Vulnerability in COMOS2023-02-14csaf · siemens_psirtDE

    COMOS is affected by memory corruption vulnerability in the cache validation service that could allow an attacker to execute arbitrary code or cause denial of service condition. Siemens has released updates for the affected products and recommends to update to the latest versions.

  • ICSA-23-047-10Siemens COMOS2023-02-14icsa · cisa_csaf_otUS

    COMOS is affected by memory corruption vulnerability in the cache validation service that could allow an attacker to execute arbitrary code or cause denial of service condition. Siemens has released updates for the affected products and recommends to update to the latest versions.

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2023-02-14geändert 2026-10-23
09

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan