CVE-2024-54005

Summary

CVE-2024-54005 is a vulnerability affecting multiple versions of COMOS, including V10.3, V10.4.0, V10.4.1, V10.4.2, V10.4.3, V10.4.4, and V10.4.4.1. The issue lies in the PDMS/E3D Engineering Interface's handling of XML External Entity (XXE) entries while communicating with external applications. Malicious actors can exploit this vulnerability by injecting malicious data into the communication channel, potentially allowing them to extract files from the user's system or accessible network folders.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.