CVE-2021-37194 - AskarLabs CVE Database

CVE-2021-37194

Vendor Siemens

Product COMOS V10.2

Weakness CWE-434 · Unrestricted file upload

Published February 9, 2022

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS allows to upload and store arbitrary files at the webserver. This could allow an attacker to store malicious files.

Key dates

02Disclosure timeline

February 9, 2022 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-37194 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Identifiers

CVE CVE-2021-37194

CWE CWE-434

Affected versions

Vendor Siemens

Product COMOS V10.2

Affected All versions only if web components are used

Vendor Siemens

Product COMOS V10.3

Affected All versions < V10.3.3.3 only if web components are used

Vendor Siemens

Product COMOS V10.4

Affected All versions < V10.4.1 only if web components are used