High SSA-659443 2 CVEs

SSA-659443: Local Code Execution Vulnerabilities in COMOS Before V10.5

Published Aug 13, 2024 · Updated Aug 13, 2024

Vendor: Siemens Product: COMOS

Summary

COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK.

Siemens has released a new version for COMOS and recommends to update to the latest version.

Vulnerabilities 2

High 7.8

CVE-2023-26495

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reu…

Apr 10, 2023
High 7.8

CVE-2023-5180 Public exploit

Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12

An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in…

Open Design Alliance ODA Drawings SDK - All Versions < 2024.12

Dec 26, 2023

Revision history

2024-08-13 #1
Publication Date

References

SSA-659443: Local Code Execution Vulnerabilities in COMOS Before V10.5 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-659443.html