Siemens COMOS

An attacker with local access to a COMOS workstation could execute arbitrary code with the privileges of the user running the application, potentially allowing them to alter process designs, steal engineering data, or compromise downstream industrial operations that depend on these designs.

Engineering teams and plant personnel who use Siemens COMOS for process design, automation engineering, and documentation. This affects organizations across chemical processing, power generation, water treatment, and other industrial sectors that rely on COMOS for system design and configuration.

An attacker must first gain local access to a machine running COMOS. They then craft a malicious file (drawing or related format) that exploits the buffer overflow or use-after-free flaw in the Open Design Alliance SDK. When a user imports this file into COMOS through the UI, the attacker's code executes with the user's privileges.