CO
Product
Comos
On CISA KEVExploited in the wildRansomware-linked
31
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 20Medium 3Low 0
Watch
Add Comos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44228 RansomwareIn wildKEV | 10.0 | Dec 10 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Affected: before 10.4.2 |
| CVE-2021-45046 RansomwareIn wildKEV | 9.0 | Dec 14 | Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack Affected: All versions, or not specified |
| CVE-2023-43504 | 9.8 | Nov 14 | A vulnerability has been identified in COMOS (All versions < V10.4.4) Affected: before 10.4.4 |
| CVE-2023-24482 | 9.8 | Feb 14 | A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3… Affected: 10.2 before 10.3.3.1.45; 10.3.3.2 before 10.3.3.2.33; 10.3.3.3 before 10.3.3.3.9; 10.3.3.4 before 10.3.3.4.6; 10.4.0.0 before 10.4.0.0.31; 10.4.1.0 before 10.4.1.0.32; +1 more |
| CVE-2021-37198 | 8.8 | Jan 11 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS… Affected: through 10.2; 10.3 before 10.3.3.3; 10.4 |
| CVE-2021-37197 | 8.8 | Jan 11 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS… Affected: through 10.2; 10.3 before 10.3.3.3; 10.4 |
| CVE-2021-32952 | 7.8 | Jun 17 | An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied… Affected: before 10.4.1 |
| CVE-2021-32948 | 7.8 | Jun 17 | An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of… Affected: before 10.4.1 |
| CVE-2021-32944 | 7.8 | Jun 17 | A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied… Affected: before 10.4.1 |
| CVE-2021-32936 | 7.8 | Jun 17 | An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of… Affected: before 10.4.1 |
| CVE-2021-32946 | 7.8 | Jun 17 | An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper… Affected: before 10.4.1 |
| CVE-2021-31784 | 7.8 | Apr 26 | An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static… Affected: before 10.4.1 |
| CVE-2021-25178 | 7.8 | Jan 18 | An issue was discovered in Open Design Alliance Drawings SDK before 2021.11 Affected: before 10.4.1 |
| CVE-2021-25177 | 7.8 | Jan 18 | An issue was discovered in Open Design Alliance Drawings SDK before 2021.11 Affected: before 10.4.1 |
| CVE-2021-25176 | 7.8 | Jan 18 | An issue was discovered in Open Design Alliance Drawings SDK before 2021.11 Affected: before 10.4.1 |
| CVE-2021-25175 | 7.8 | Jan 18 | An issue was discovered in Open Design Alliance Drawings SDK before 2021.11 Affected: before 10.4.1 |
| CVE-2021-25174 | 7.8 | Jan 18 | An issue was discovered in Open Design Alliance Drawings SDK before 2021.12 Affected: before 10.4.1 |
| CVE-2021-25173 | 7.8 | Jan 18 | An issue was discovered in Open Design Alliance Drawings SDK before 2021.12 Affected: before 10.4.1 |
| CVE-2023-46601 | 7.5 | Nov 14 | A vulnerability has been identified in COMOS (All versions) Affected: All versions, or not specified |
| CVE-2023-43503 | 7.5 | Nov 14 | A vulnerability has been identified in COMOS (All versions < V10.4.4) Affected: before 10.4.4 |
| CVE-2021-37194 | 7.5 | Feb 9 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS… Affected: 10.3 before 10.3.3.3; 10.4 before 10.4.1; 10.2 |
| CVE-2021-32950 | 7.1 | Jun 17 | An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied… Affected: before 10.4.1 |
| CVE-2021-32940 | 7.1 | Jun 17 | An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of… Affected: before 10.4.1 |
| CVE-2021-32938 | 7.1 | Jun 17 | Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data Affected: before 10.4.1 |
| CVE-2023-43505 | 6.5 | Nov 14 | A vulnerability has been identified in COMOS (All versions) Affected: All versions, or not specified |
| CVE-2021-37196 | 6.5 | Jan 11 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS… Affected: through 10.2; 10.3 before 10.3.3.3; 10.4 |
| CVE-2021-37195 | 6.1 | Jan 11 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS… Affected: through 10.2; 10.3 before 10.3.3.2.14; 4.1 |
| CVE-2013-6840 | – | Dec 10 | Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors Affected: 9.2; 9.2.0.6.10; 10.0; 10.0.3.0.4; 10.1 |
| CVE-2013-4943 | – | Aug 9 | The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended… Affected: 9.1; 9.2; 10.0 |
| CVE-2013-3927 | – | Jun 18 | Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the… Affected: 9.2; 10.0 |
| CVE-2012-3009 | – | Aug 16 | Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via… Affected: through 9.1; 9.2; 10.0 |
Showing 31