High SSA-769791 1 CVE

SSA-769791: Local Arbitrary Code Execution Vulnerability in COMOS Before V10.6

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: Siemens Product: COMOS

Summary

COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK.

Siemens has released a new version for COMOS and recommends to update to the latest version.

Vulnerabilities 1

High 8.1

CVE-2024-8894

Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a c…

Open Design Alliance ODA Drawings SDK - All Versions < 2025.10

Dec 4, 2024

Revision history

2025-08-12 #1
Publication Date

References

SSA-769791: Local Arbitrary Code Execution Vulnerability in COMOS Before V10.6 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-769791.html