CVE-2023-24482
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-02-14 11:15:14.783000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2023-24482",
"sourceIdentifier": "[email protected]",
"published": "2023-02-14T11:15:14.783",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition."
},
{
"lang": "es",
"value": "Una vulnerabilidad ha sido identificada en COMOS V10.2 (Todas las versiones), COMOS V10.3.3.1 (Todas las versiones anteriores a V10.3.3.1.45), COMOS V10.3.3.2 (Todas las versiones anteriores a V10.3.3.2.33), COMOS V10.3.3.3 (Todas las versiones anteriores a V10.3.3.3.9), COMOS V10.3.3.4 (Todas las versiones anteriores a V10.3.3.4.6), COMOS V10.4.0.0 (Todas las versiones anteriores a V10.4.0.0.31), COMOS V10.4.1.0 (Todas las versiones anteriores a V10.4.1.0.32), COMOS V10.4.2.0 (Todas las versiones anteriores a V10.4.2.0.25). El servicio de validación de caché en COMOS es vulnerable a un desbordamiento de búfer basado en Structured Exception Handler (SEH). Esto podría permitir a un atacante ejecutar código arbitrario en el sistema objetivo o causar una condición de denegación de servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "COMOS V10.2",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.3.3.1",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.3.3.1.45",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.3.3.2",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.3.3.2.33",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.3.3.3",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.3.3.3.9",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.3.3.4",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.3.3.4.6",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.4.0.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.4.0.0.31",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.4.1.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.4.1.0.32",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "COMOS V10.4.2.0",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V10.4.2.0.25",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-03-20T16:13:59.134812Z",
"id": "CVE-2023-24482",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.2",
"versionEndExcluding": "10.3.3.1.45",
"matchCriteriaId": "5EE12A9C-F1CC-4E67-A3FF-DBEEDBD4FF87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.3.3.2",
"versionEndExcluding": "10.3.3.2.33",
"matchCriteriaId": "0D6FCFC8-00D0-4A0E-B27A-F3A393A96838"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.3.3.3",
"versionEndExcluding": "10.3.3.3.9",
"matchCriteriaId": "7751C0FE-268F-4DAD-9B10-25FC7E97A3BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.3.3.4",
"versionEndExcluding": "10.3.3.4.6",
"matchCriteriaId": "7BD1A27A-5EE8-4AA1-B29D-0B534EC4E8B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.4.0.0",
"versionEndExcluding": "10.4.0.0.31",
"matchCriteriaId": "1CA2B391-8BB4-4224-8BDE-B00817F82E3E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.4.1.0",
"versionEndExcluding": "10.4.1.0.32",
"matchCriteriaId": "516D326A-E1CF-40ED-8B47-995CE0E51741"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.4.2.0",
"versionEndExcluding": "10.4.2.0.25",
"matchCriteriaId": "895FAF07-0DA5-459E-8C72-F5566F9562B8"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}