Skip to content
OpenAdvisories
Critical SSA-137900 16 CVEs

SSA-137900: Multiple Vulnerabilities in COMOS

Published Nov 14, 2023 · Updated Nov 14, 2023

Vendor: Siemens Product: COMOS

Summary

COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations.

Siemens has released an update for COMOS and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 16

  • Critical 9.8
    CVE-2020-25020

    Improper Restriction of XML External Entity Reference in MPXJ

    MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.

    net.sf.mpxj:mpxj Maven
  • Critical 9.6
    CVE-2023-43504

    A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache valida…

    Siemens COMOS ICS / OT
  • Critical 9.6
    CVE-2023-43505

    A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in S…

    Siemens COMOS ICS / OT
  • Critical 9.6
    CVE-2023-46601

    A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in m…

    Siemens COMOS ICS / OT
  • High 8.8
    CVE-2023-0933

    Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap …

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-1530

    Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap co…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-2931

    Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  • High 8.8
    CVE-2023-2932

    Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  • High 7.8
    CVE-2022-23095

    Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a cra…

  • High 7.8
    CVE-2023-22669

    Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-s…

  • High 7.8
    CVE-2023-22670

    A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.…

  • Medium 5.3
    CVE-2020-35460 Public exploit

    MPXJ path Traversal vulnerability

    common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.

    net.sf.mpxj:mpxj Maven
  • Low 3.5
    CVE-2023-43503

    A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks…

    Siemens COMOS ICS / OT
  • Unscored —
    CVE-2022-28807

    An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists …

  • Unscored —
    CVE-2022-28808

    An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists …

  • Unscored —
    CVE-2022-28809

    An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists …

Revision history

  1. #1

    Publication Date

References