Summary
Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process.
Siemens has released an update for the Solid Edge and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out …
Revision history
-
#1
Publication Date
References
-
SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-258115.pdf
-
SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-258115.txt