https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:14:54.705915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-54005 CVE-2024-54005 2026-10-08T21:14:54.721447+00:00

Affected: Siemens COMOS V10.3, Siemens COMOS V10.4.0, Siemens COMOS V10.4.1, Siemens COMOS V10.4.2, Siemens COMOS V10.4.3, Siemens COMOS V10.4.4, Siemens COMOS V10.4.4.1

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions < V10.4.3.0.47), COMOS V10.4.4 (All versions < V10.4.4.2), COMOS V10.4.4.1 (All versions < V10.4.4.1.21). The PDMS/E3D Engineering Interface improperly handles XML External Entity (XXE) entries when communicating with an external application. This could allow an attacker to extract any file with a known location on the user's system or accessible network folders by injecting malicious data into the communication channel between the two systems.