CVE-2023-24482

{"id": "CVE-2023-24482", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-24482", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-03-20T16:13:59.134812Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "productcert@siemens.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "productcert@siemens.com", "affectedData": [{"vendor": "Siemens", "product": "COMOS V10.2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.3.3.1", "versions": [{"status": "affected", "version": "All versions < V10.3.3.1.45"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.3.3.2", "versions": [{"status": "affected", "version": "All versions < V10.3.3.2.33"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.3.3.3", "versions": [{"status": "affected", "version": "All versions < V10.3.3.3.9"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.3.3.4", "versions": [{"status": "affected", "version": "All versions < V10.3.3.4.6"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.4.0.0", "versions": [{"status": "affected", "version": "All versions < V10.4.0.0.31"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.4.1.0", "versions": [{"status": "affected", "version": "All versions < V10.4.1.0.32"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.4.2.0", "versions": [{"status": "affected", "version": "All versions < V10.4.2.0.25"}], "defaultStatus": "unknown"}]}], "published": "2023-02-14T11:15:14.783", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf", "tags": ["Vendor Advisory"], "source": "productcert@siemens.com"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "productcert@siemens.com", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition."}, {"lang": "es", "value": "Una vulnerabilidad ha sido identificada en COMOS V10.2 (Todas las versiones), COMOS V10.3.3.1 (Todas las versiones anteriores a V10.3.3.1.45), COMOS V10.3.3.2 (Todas las versiones anteriores a V10.3.3.2.33), COMOS V10.3.3.3 (Todas las versiones anteriores a V10.3.3.3.9), COMOS V10.3.3.4 (Todas las versiones anteriores a V10.3.3.4.6), COMOS V10.4.0.0 (Todas las versiones anteriores a V10.4.0.0.31), COMOS V10.4.1.0 (Todas las versiones anteriores a V10.4.1.0.32), COMOS V10.4.2.0 (Todas las versiones anteriores a V10.4.2.0.25). El servicio de validaci\u00f3n de cach\u00e9 en COMOS es vulnerable a un desbordamiento de b\u00fafer basado en Structured Exception Handler (SEH). Esto podr\u00eda permitir a un atacante ejecutar c\u00f3digo arbitrario en el sistema objetivo o causar una condici\u00f3n de denegaci\u00f3n de servicio."}], "lastModified": "2026-10-23T23:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EE12A9C-F1CC-4E67-A3FF-DBEEDBD4FF87", "versionEndExcluding": "10.3.3.1.45", "versionStartIncluding": "10.2"}, {"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D6FCFC8-00D0-4A0E-B27A-F3A393A96838", "versionEndExcluding": "10.3.3.2.33", "versionStartIncluding": "10.3.3.2"}, {"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7751C0FE-268F-4DAD-9B10-25FC7E97A3BB", "versionEndExcluding": "10.3.3.3.9", "versionStartIncluding": "10.3.3.3"}, {"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BD1A27A-5EE8-4AA1-B29D-0B534EC4E8B2", "versionEndExcluding": "10.3.3.4.6", "versionStartIncluding": "10.3.3.4"}, {"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CA2B391-8BB4-4224-8BDE-B00817F82E3E", "versionEndExcluding": "10.4.0.0.31", "versionStartIncluding": "10.4.0.0"}, {"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "516D326A-E1CF-40ED-8B47-995CE0E51741", "versionEndExcluding": "10.4.1.0.32", "versionStartIncluding": "10.4.1.0"}, {"criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "895FAF07-0DA5-459E-8C72-F5566F9562B8", "versionEndExcluding": "10.4.2.0.25", "versionStartIncluding": "10.4.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "productcert@siemens.com"}