Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS uses a flawed implementation of CSRF prevention. An attacker could exploit this vulnerability to perform cross-site request forgery attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens COMOS V10.2

  • All versions only if web components are usedaffected

Siemens COMOS V10.3

  • All versions < V10.3.3.3 only if web components are usedaffected

Siemens COMOS V10.4

  • All versions < V10.4.1 only if web components are usedaffected

References