Siemens COMOS Affected by Multiple Flaws, at Least One Critical

#cybersecurity #infosec

Summary

Siemens COMOS plant management software is affected by six vulnerabilities, including a critical severity 10 XSS flaw and a sandbox escape, which could lead to remote code execution or data theft.

Take Action:

First priority, make sure your industrial systems including COMOS are isolated from the internet and accessible only from trusted networks. Plan a quick update of COMOS instances to latest versions of 10.4 and 10.5 branck. For branch 10.6 contact Siemens for instructions.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines