Description
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | COMOS | All versions < V10.4.4 | — |
Advisories 2
- ICSA-23-320-09 Siemens COMOS CISA ICS & IT advisories · Nov 14, 2023
- SSA-137900 SSA-137900: Multiple Vulnerabilities in COMOS Siemens ProductCERT · Nov 14, 2023