Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductComos (089b35ae-4d5b-595f-9bc2-d833343257b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46601 vulnerable 2026-06-08 06:12:45.361994 Details available
CRITICAL (9.6)
A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to.
Published: 2023-11-14T11:04:23.657Z
Updated: 2025-01-08T16:19:25.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43505 vulnerable 2026-06-08 06:12:31.753420 Details available
CRITICAL (9.6)
A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an attacker to access files that the user should not have access to.
Published: 2023-11-14T11:03:47.546Z
Updated: 2025-01-08T16:18:03.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43504 vulnerable 2026-06-08 06:12:31.752993 Details available
CRITICAL (9.6)
A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.
Published: 2023-11-14T11:03:46.350Z
Updated: 2025-01-08T16:40:40.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43503 vulnerable 2026-06-08 06:12:31.752116 Details available
LOW (3.5)
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP.
Published: 2023-11-14T11:03:45.149Z
Updated: 2025-01-08T16:41:46.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24482 vulnerable 2026-06-08 05:56:05.580318 Details available
CRITICAL (10)
A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.
Published: 2023-02-14T10:36:24.707Z
Updated: 2025-03-20T16:14:10.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45046 vulnerable 2026-06-08 05:36:47.735574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44228 vulnerable 2026-06-08 05:36:45.205998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37198 vulnerable 2026-06-08 05:32:53.718431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37197 vulnerable 2026-06-08 05:32:53.717669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37196 vulnerable 2026-06-08 05:32:53.715735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37195 vulnerable 2026-06-08 05:32:53.713567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37194 vulnerable 2026-06-08 05:32:53.712281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32952 vulnerable 2026-06-08 05:32:08.250832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32950 vulnerable 2026-06-08 05:32:08.244992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32948 vulnerable 2026-06-08 05:32:08.243912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32946 vulnerable 2026-06-08 05:32:08.243181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32944 vulnerable 2026-06-08 05:32:08.242040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32940 vulnerable 2026-06-08 05:32:08.227973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32938 vulnerable 2026-06-08 05:32:08.227222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32936 vulnerable 2026-06-08 05:32:08.224350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31784 vulnerable 2026-06-08 05:31:53.891858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25178 vulnerable 2026-06-08 05:30:40.170219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25177 vulnerable 2026-06-08 05:30:40.169598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25176 vulnerable 2026-06-08 05:30:40.168939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25175 vulnerable 2026-06-08 05:30:40.168239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25174 vulnerable 2026-06-08 05:30:40.167281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25173 vulnerable 2026-06-08 05:30:40.164650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3009 vulnerable 2026-06-08 05:02:07.716036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.