Critical 1 exploited CVE ICSA-26-043-03 6 CVEs

Siemens COMOS

Published Dec 9, 2025 · Updated Mar 12, 2026 · Revision 7

Vendor: Siemens Product: COMOS V10.4 Product: COMOS V10.4.5 Product: COMOS V10.5 Product: COMOS V10.6

Summary

COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 6

High 8.3

CVE-2025-2783 Exploited Public exploit

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allo…

Google Chrome qt6-qtwebengine qt5-qtwebengine Browsers Alpine

Mar 26, 2025
KEV Mar 27, 2025
Critical 10.0

CVE-2024-47875 Public exploit

DOMPurify nesting-based mXSS

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

cure53 DOMPurify cacti argo-workflows Debian Ubuntu Wolfi npm

Oct 11, 2024
High 8.1

CVE-2025-40801

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT B…

Siemens Simcenter Femap Tecnomatix Plant Simulation Simcenter 3D ICS / OT

Dec 9, 2025
High 7.4

CVE-2025-40800

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V…

Siemens Simcenter Femap Solid Edge SE2025 Solid Edge SE2026 Browsers ICS / OT

Dec 9, 2025
Medium 5.3

CVE-2025-10148

predictable WebSocket mask

curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious se…

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Sep 12, 2025
Low 3.4

CVE-2024-11053

netrc and redirect credential leak

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …

curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024

Revision history

2026-03-12 #6
CISA Republication update based on Siemens ProductCERT SSA-212953 advisory
2026-03-12 #7
CISA Republication update based on Siemens ProductCERT SSA-212953 advisory
2026-03-10 #5
Added fix for COMOS V10.6
2026-02-12 #4
CISA Republication - Initial CISA Republication of Siemens ProductCERT SSA-212953 advisory
2026-02-10 #3
Added fix for COMOS V10.4.5
2026-01-13 #2
Removed CVE-2024-11053 and CVE-2025-10148 from COMOS V10.5.2 as this version line is not affected
2025-12-09 #1
Publication Date

References

SSA-212953: Multiple Vulnerabilities in COMOS - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-212953.html
ICS Advisory ICSA-26-043-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-03
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b