CVE-2021-37196 Explained : Impact and Mitigation

A vulnerability has been identified in COMOS versions V10.2, V10.3, and V10.4, affecting web components. The vulnerability allows attackers to store files in folders accessible by the COMOS Web webservice.

Understanding CVE-2021-37196

This CVE impacts Siemens' COMOS versions V10.2, V10.3, and V10.4 when web components are in use.

What is CVE-2021-37196?

A vulnerability in COMOS allows attackers to store files in any folder accessible by the COMOS Web webservice.

The Impact of CVE-2021-37196

The vulnerability could be exploited by an attacker to manipulate files within the system's accessible folders.

Technical Details of CVE-2021-37196

Siemens' COMOS versions V10.2, V10.3, and V10.4 are susceptible to a Relative Path Traversal vulnerability.

Vulnerability Description

COMOS Web component of COMOS unpacks specially crafted archive files to relative paths, enabling attackers to store files at specific locations.

Affected Systems and Versions

COMOS V10.2: All versions if web components are in use
COMOS V10.3: All versions < V10.3.3.3 and >= V10.3.3.3 if web components are used
COMOS V10.4: All versions < V10.4.1 if web components are utilized

Exploitation Mechanism

The vulnerability is exploited by unpacking specially crafted archive files to relative paths.

Mitigation and Prevention

To address CVE-2021-37196, immediate actions and long-term security practices are necessary.

Immediate Steps to Take

Update to the latest secure versions of COMOS
Disable unnecessary web components

Long-Term Security Practices

Implement proper file access controls and monitoring mechanisms to prevent unauthorized file storage.

Patching and Updates

Apply patches provided by Siemens and ensure timely software updates to mitigate the vulnerability.