XXE Injection Vulnerabilities in COMOS

An attacker who can access COMOS could extract sensitive configuration and process files from the engineering workstation or server, potentially exposing credentials or process logic used in your control systems.

Engineering and operations personnel who use Siemens COMOS for process design, engineering, and configuration. This affects industrial control system design workstations and engineering servers in manufacturing, utilities, and process industries.

An attacker would need to craft a malicious XML file and trick a user into opening it within COMOS, or intercept and modify XML input to the application. The XXE injection then parses external XML entities, allowing the attacker to read local files from the affected machine.