Summary
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DFT, PAR or PSM format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code.
Siemens has released an update for Solid Edge SE2023 and recommends to update to the latest version.
Vulnerabilities 9
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application con…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications co…
Revision history
-
#1
Publication Date
References
-
SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-811403.html
-
SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-811403.pdf
-
SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-811403.txt