CVE-2023-43504
Critical
Description
A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.
SeverityCritical
CVSS9.6
Exploit probability—
ProductSiemens Comos
PublishedNov 14, 2023
First seenNov 14, 2023
Weakness typeCWE-120CWE-120
How to fix
Update
- siemens comos10.4.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens comos | v < 10.4.4 | 10.4.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.