A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions < V10.4.3.0.47), COMOS V10.4.4 (All versions < V10.4.4.2), COMOS V10.4.4.1 (All versions < V10.4.4.1.21). The PDMS/E3D Engineering Interface improperly handles XML External Entity (XXE) entries when communicating with an external application. This could allow an attacker to extract any file with a known location on the user's system or accessible network folders by injecting malicious data into the communication channel between the two systems.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
COMOS V10.3
Vendor
Siemens
Product
COMOS V10.3
Platforms
Unknown
Default status
unknown
COMOS V10.3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.3.3.5.8
Unavailable
None listed
COMOS V10.4.0
Vendor
Siemens
Product
COMOS V10.4.0
Platforms
Unknown
Default status
unknown
COMOS V10.4.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
COMOS V10.4.1
Vendor
Siemens
Product
COMOS V10.4.1
Platforms
Unknown
Default status
unknown
COMOS V10.4.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
COMOS V10.4.2
Vendor
Siemens
Product
COMOS V10.4.2
Platforms
Unknown
Default status
unknown
COMOS V10.4.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
COMOS V10.4.3
Vendor
Siemens
Product
COMOS V10.4.3
Platforms
Unknown
Default status
unknown
COMOS V10.4.3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.4.3.0.47
Unavailable
None listed
COMOS V10.4.4
Vendor
Siemens
Product
COMOS V10.4.4
Platforms
Unknown
Default status
unknown
COMOS V10.4.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.4.4.2
Unavailable
None listed
COMOS V10.4.4.1
Vendor
Siemens
Product
COMOS V10.4.4.1
Platforms
Unknown
Default status
unknown
COMOS V10.4.4.1 · Scoped product and version facts