← CVE Intelligence

CVE-2021-37194

Siemens / COMOS V10.2 PUBLISHED

Description (CNA)

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS allows to upload and store arbitrary files at the webserver. This could allow an attacker to store malicious files.

Affected (CNA)

Vendor / productVersions
Siemens / COMOS V10.2affected All versions only if web components are used
Siemens / COMOS V10.3affected All versions < V10.3.3.3 only if web components are used
Siemens / COMOS V10.4affected All versions < V10.4.1 only if web components are used

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.