Summary
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to crash the application or execute arbitrary code.
Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
Vulnerabilities 3
-
High 7.8
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications co…
-
High 7.3
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications su…
Revision history
-
#1
Publication Date
References
-
SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-351178.html
-
ICS Advisory ICSA-24-319-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-05
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B