← CVE Intelligence

CVE-2021-37197

Siemens / COMOS V10.2 PUBLISHED

Description (CNA)

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS is vulnerable to SQL injections. This could allow an attacker to execute arbitrary SQL statements.

Affected (CNA)

Vendor / productVersions
Siemens / COMOS V10.2affected All versions only if web components are used
Siemens / COMOS V10.3affected All versions < V10.3.3.3 only if web components are used
Siemens / COMOS V10.4affected All versions < V10.4.1 only if web components are used

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.