Known vulnerabilities in Siemens COMOS

Vendor: Siemens
Software: Siemens COMOS
Software CPE: cpe:2.3:a:siemens:siemens_comos:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Siemens COMOS Siemens COMOS is affected by 39 known vulnerabilities: 23 high, 13 medium, 3 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119811 - Improper Certificate Validation
CVE-2025-40800		 CWE-295 High
No
No
 - 10.12.2025 SB20251210191
#VU101652 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-54005		 CWE-611 Medium
No
No
 10.3.3.5.8, 10.4.3.0.47, 10.4.4.1.21, 10.4.4.2 11.12.2024 SB2024121135
#VU101650 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-49704		 CWE-611 Medium
No
No
 10.3.3.5.8, 10.4.3.0.47, 10.4.4.1.21, 10.4.4.2 11.12.2024 SB2024121135
#VU83230 - Improper Access Control
CVE-2023-46601		 CWE-284 Medium
No
No
 - 16.11.2023 SB2023111636
#VU83229 - Improper Access Control
CVE-2023-43505		 CWE-284 Medium
No
No
 - 16.11.2023 SB2023111636
#VU83228 - Memory corruption
CVE-2023-43504		 CWE-119 High
No
No
 10.4.4 16.11.2023 SB2023111637
#VU83227 - Cleartext Transmission of Sensitive Information
CVE-2023-43503		 CWE-319 Low
No
No
 10.4.4 16.11.2023 SB2023111637
#VU83226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-35460		 CWE-22 Medium
No
No
 10.4.4 16.11.2023 SB2020121577
SB2023111637
SB2025011715
#VU76675 - Use After Free
CVE-2023-2931		 CWE-416 High
No
No
 10.4.4 30.05.2023 SB2023053104
SB2023060401
SB2023072067
and 3 more
#VU76676 - Use After Free
CVE-2023-2932		 CWE-416 High
No
No
 10.4.4 30.05.2023 SB2023053104
SB2023060303
SB2023060401
and 4 more
#VU73909 - Use After Free
CVE-2023-1530		 CWE-416 High
No
No
 10.4.4 21.03.2023 SB2023032156
SB2023032402
SB2023032501
and 20 more
#VU72549 - Integer overflow
CVE-2023-0933		 CWE-190 Medium
No
No
 10.4.4 24.02.2023 SB2023022403
SB2023022417
SB2023022603
and 12 more
#VU72538 - Heap-based Buffer Overflow
CVE-2023-22670		 CWE-122 High
No
No
 10.4.4 24.02.2023 SB2023022413
SB2023022415
SB2023111637
#VU72537 - Heap-based Buffer Overflow
CVE-2023-22669		 CWE-122 High
No
No
 10.4.4 24.02.2023 SB2023022413
SB2023022415
SB2023111637
#VU72391 - Memory corruption
CVE-2023-24482		 CWE-119 High
No
No
 10.3.3.1.45, 10.3.3.2.33, 10.3.3.3.9, 10.3.3.4.6, 10.4.0.0.31, 10.4.1.0.32, 10.4.2.0.25 20.02.2023 SB2023022018
#VU65291 - Memory corruption
CVE-2022-28809		 CWE-119 High
No
No
 10.4.4 14.07.2022 SB2022071402
SB2023111637
#VU65290 - Memory corruption
CVE-2022-28808		 CWE-119 High
No
No
 10.4.4 14.07.2022 SB2022071402
SB2023111637
#VU65289 - Memory corruption
CVE-2022-28807		 CWE-119 High
No
No
 10.4.4 14.07.2022 SB2022071402
SB2023111637
#VU59640 - Memory corruption
CVE-2022-23095		 CWE-119 High
No
No
 10.4.4 17.01.2022 SB2022011710
SB2023111637
#VU49740 - Improper input validation
CVE-2020-25020		 CWE-20 High
No
No
 10.4.4 20.01.2021 SB2021012017
SB2023111637
SB2025011715


Showing elements 1 - 20 out of 39