Buffer Overflow Vulnerability in COMOS by Siemens
CVE-2023-43504

9.8CRITICAL

Key Information:

Vendor

Siemens
Status
COMOS
Vendor
CVE Published:
14 November 2023

What is CVE-2023-43504?

A buffer overflow vulnerability exists in the Ptmcast executable of Siemens COMOS versions prior to V10.4.4. This flaw occurs during the testing of the cache validation service, potentially enabling an attacker to execute arbitrary code on affected systems or trigger a denial of service condition. Users are advised to apply the appropriate patches and updates to mitigate potential risks associated with this vulnerability.

Affected Version(s)

COMOS All versions < V10.4.4

References

https://cert-portal.siemens.com/productcert/pdf/ssa-13790...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-43504 : Buffer Overflow Vulnerability in COMOS by Siemens