CVE-2023-24482: comos from 10.2 (inclusive), before 10.3.3.1.45 (exclusive), from 10.3.3.2 (inclusive), before 10.3.3.2.33…

Affected technology

comos · from 10.2 (inclusive), before 10.3.3.1.45 (exclusive)
siemens

comos · from 10.3.3.2 (inclusive), before 10.3.3.2.33 (exclusive)
siemens

comos · from 10.3.3.3 (inclusive), before 10.3.3.3.9 (exclusive)
siemens

comos · from 10.3.3.4 (inclusive), before 10.3.3.4.6 (exclusive)
siemens

comos · from 10.4.0.0 (inclusive), before 10.4.0.0.31 (exclusive)
siemens

comos · from 10.4.1.0 (inclusive), before 10.4.1.0.32 (exclusive)
siemens

comos · from 10.4.2.0 (inclusive), before 10.4.2.0.25 (exclusive)
siemens

COMOS V10.2 · All versions
Siemens

COMOS V10.3.3.1 · All versions < V10.3.3.1.45
Siemens

COMOS V10.3.3.2 · All versions < V10.3.3.2.33
Siemens

COMOS V10.3.3.3 · All versions < V10.3.3.3.9
Siemens

COMOS V10.3.3.4 · All versions < V10.3.3.4.6
Siemens

COMOS V10.4.0.0 · All versions < V10.4.0.0.31
Siemens

COMOS V10.4.1.0 · All versions < V10.4.1.0.32
Siemens

COMOS V10.4.2.0 · All versions < V10.4.2.0.25
Siemens

Description’s affected range: versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker could execute arbitrary code on the target system or cause denial of service condition. Vendor/CNA’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high.