CVE-2023-24482

CriticalCVSS 9.8/10Last modified Oct 23, 2026

Description

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Feb 14, 2023
Last modified: Oct 23, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-244837.8A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM CVE-2023-244845.5A malicious user can cause log files to be written to a directory that they do not have permission to write to.CVE-2023-244857.8Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer runni CVE-2023-244865.5A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to CVE-2023-244877.5Arbitrary file read in Citrix ADC and Citrix Gateway CVE-2023-244886.1Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting CVE-2023-244899.8A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthent CVE-2023-24499.8The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the pl CVE-2023-244904.3Users with only access to launch VDA applications can launch an unauthorized desktop CVE-2023-244917.8A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with acce CVE-2023-244928.8A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely e CVE-2023-244935.7A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An au