CVE-2023-43504

Published Nov 14, 2023

Last updated 5 months ago

CVSS critical 9.6

Overview

Description: A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.
Source: productcert@siemens.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

productcert@siemens.com: CWE-120

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0C7BA84-5F46-4F5C-B856-F9DA231DAC1A",
            "versionEndExcluding": "10.4.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References