VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 11, 2022· Updated Aug 4, 2024

CVE-2021-37197

CVE-2021-37197

Description

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS is vulnerable to SQL injections. This could allow an attacker to execute arbitrary SQL statements.

Affected products

4
  • Siemens Foundation/Comosllm-fuzzy
    Range: V10.2 (all); V10.3 < V10.3.3.3; V10.4 < V10.4.1
  • Siemens/COMOS V10.2v5
    Range: All versions only if web components are used
  • Siemens/COMOS V10.3v5
    Range: All versions < V10.3.3.3 only if web components are used
  • Siemens/COMOS V10.4v5
    Range: All versions < V10.4.1 only if web components are used

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.