Summary
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code.
Siemens has released a new version for Solid Edge SE2026 and recommends to update to the latest version.
Vulnerabilities 2
-
High 7.8
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is …
-
High 7.8
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications co…
Revision history
-
#3
Initial CISA Republication of Siemens ProductCERT SSA-921111 advisory
-
#2
Fixed error in title with the change from SE225 to SE226
-
#1
Publication Date
References
-
SSA-921111: Two File Parsing Vulnerabilities in Solid Edge Before Version SE226 Update 5 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-921111.html
-
ICS Advisory ICSA-26-134-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-03
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b