Product by Siemens
Siemens COMOS
31 known vulnerabilities in Siemens COMOS (Siemens), 2 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
2
Actively exploited (KEV)
2
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomwarealso in 22 other products | 9.0 | |
| High | CVE-2021-25178 | Opendesign Drawings Software Development Kit: Stack-Based Buffer Overflow | 7.8 | |
| High | CVE-2021-32946 | Drawings SDK: Improper Check for Unusual or Exceptional Conditions | 7.8 | |
| High | CVE-2021-32936 | Drawings SDK: Out-of-bounds Write | 7.8 | |
| High | CVE-2021-32952 | Drawings SDK: Out-of-bounds Write | 7.8 | |
| High | CVE-2021-32948 | Drawings SDK: Out-of-bounds Write | 7.8 | |
| High | CVE-2021-32944 | Drawings SDK: Use After Free | 7.8 | |
| High | CVE-2021-25175 | Opendesign Drawings Software Development Kit: Denial of Service | 7.8 | |
| High | CVE-2021-25176 | Opendesign Drawings Software Development Kit: NULL Pointer Dereference | 7.8 | |
| High | CVE-2021-25173 | Opendesign Drawings Software Development Kit: Denial of Service | 7.8 | |
| High | CVE-2021-25177 | Opendesign Drawings Software Development Kit: Type Confusion | 7.8 | |
| High | CVE-2021-25174 | Opendesign Drawings Software Development Kit: Memory Corruption | 7.8 | |
| High | CVE-2021-32950 | Drawings SDK: Out-of-bounds Read | 7.1 | |
| High | CVE-2021-32940 | Drawings SDK: Out-of-bounds Read | 7.1 | |
| Critical | CVE-2023-43504 | Siemens COMOS: Classic Buffer Overflow | 9.6 | |
| High | CVE-2021-32938 | Drawings SDK: Out-of-bounds Read | 7.1 | |
| Critical | CVE-2023-24482 | Siemens COMOS: Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2023-43505 | Siemens COMOS: Improper Access Control | 9.6 | |
| High | CVE-2021-37197 | Siemens COMOS: SQL Injection | 8.8 | |
| Critical | CVE-2023-46601 | Siemens COMOS: Improper Access Control | 9.6 | |
| High | CVE-2021-31784 | Opendesign Drawings SDK: Out-of-Bounds Write | 7.8 | |
| High | CVE-2021-37194 | Siemens COMOS: Unrestricted Upload of File with Dangerous Type | 7.5 | |
| Medium | CVE-2021-37196 | Siemens COMOS: Relative Path Traversal | 6.5 | |
| Not rated | CVE-2012-3009 | Siemens COMOS: security vulnerability | — |
News
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
- SSA-663999 V1.0: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.1siemens-productcert