← CVE Intelligence

CVE-2021-37198

Siemens / COMOS V10.2 PUBLISHED

Description (CNA)

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS uses a flawed implementation of CSRF prevention. An attacker could exploit this vulnerability to perform cross-site request forgery attacks.

Affected (CNA)

Vendor / productVersions
Siemens / COMOS V10.2affected All versions only if web components are used
Siemens / COMOS V10.3affected All versions < V10.3.3.3 only if web components are used
Siemens / COMOS V10.4affected All versions < V10.4.1 only if web components are used

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.