Skip to content
OpenAdvisories
High ICSA-24-228-08 2 CVEs

Siemens COMOS

Published Aug 13, 2024 · Updated Aug 13, 2024

Vendor: Siemens Product: COMOS

Summary

COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK.

Siemens has released a new version for COMOS and recommends to update to the latest version.

Vulnerabilities 2

  • High 7.8
    CVE-2023-26495

    An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reu…

  • High 7.8
    CVE-2023-5180 Public exploit

    Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12

    An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in…

    Open Design Alliance ODA Drawings SDK - All Versions < 2024.12

Revision history

  1. #1

    Publication Date

References