siemens comos

Name: siemens comos
Brand: siemens

productUS

cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical22high5medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	10.4.2	2021-12-10	< 10.4.2
CVE-2021-45046US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-12-14	—
CVE-2021-25178US	high7.8	3.37% (89th)	—	10.4.1	2021-01-18	< 10.4.1
CVE-2021-32946US	high7.8	2.80% (86th)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-32936US	high7.8	2.77% (86th)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-32952US	high7.8	2.71% (86th)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-32948US	high7.8	2.71% (86th)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-32944US	high7.8	2.67% (86th)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-25175US	high7.8	2.66% (86th)	—	10.4.1	2021-01-18	< 10.4.1
CVE-2021-25177US	high7.8	2.31% (83rd)	—	10.4.1	2021-01-18	< 10.4.1
CVE-2021-25176US	high7.8	2.31% (83rd)	—	10.4.1	2021-01-18	< 10.4.1
CVE-2021-25173US	high7.8	2.31% (83rd)	—	10.4.1	2021-01-18	< 10.4.1
CVE-2021-25174US	high7.8	2.24% (83rd)	—	10.4.1	2021-01-18	< 10.4.1
CVE-2012-3009US	high8.5	2.15% (82nd)	—	no fix	2012-08-16	3 versions
CVE-2021-32950US	high7.1	2.05% (81st)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-32940US	high7.1	2.05% (81st)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-32938US	high7.1	1.44% (73rd)	—	10.4.1	2021-06-17	< 10.4.1
CVE-2021-31784US	high7.8	0.85% (58th)	—	10.4.1	2021-04-26	< 10.4.1
CVE-2023-43504US	critical9.8	0.85% (58th)	—	10.4.4	2023-11-14	< 10.4.4
CVE-2021-37194US	high7.5	0.85% (58th)	—	10.3.3.3	2022-02-09	3 versions
CVE-2021-37197US	high8.8	0.82% (57th)	—	10.3.3.3	2022-01-11	3 versions
CVE-2023-24482US	critical9.8	0.81% (57th)	—	10.3.3.3.9	2023-02-14	7 versions
CVE-2021-37196US	medium6.5	0.78% (56th)	—	10.3.3.3	2022-01-11	3 versions
CVE-2023-43505US	medium6.5	0.62% (49th)	—	no fix	2023-11-14	—
CVE-2023-46601US	high7.5	0.52% (44th)	—	no fix	2023-11-14	—
CVE-2021-37195US	medium6.1	0.51% (43rd)	—	10.3.3.2.14	2022-01-11	3 versions
CVE-2013-4943US	high7.2	0.43% (37th)	—	no fix	2013-08-09	3 versions
CVE-2013-3927US	medium4.6	0.36% (30th)	—	no fix	2013-06-18	2 versions
CVE-2021-37198US	high8.8	0.36% (30th)	—	10.3.3.3	2022-01-11	3 versions
CVE-2023-43503US	high7.5OT elevated	0.31% (24th)	—	10.4.4	2023-11-14	< 10.4.4
CVE-2013-6840US	medium6.9	0.31% (24th)	—	no fix	2013-12-10	5 versions
CVE-2024-49704US	—	0.18% (8th)	—	no fix	2024-12-10	—
CVE-2024-54005US	—	0.16% (5th)	—	no fix	2024-12-10	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write6 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-264CWE-2643 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-284Improper Access Control2 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE31 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan