Summary
Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Note:
- This advisory covers security vulnerabilities recently disclosed by Open Design Alliance [0]
Vulnerabilities 1
-
High 7.8
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reu…
Revision history
-
#2
Updated description and CWE for CVE-2023-26495
-
#1
Publication Date
References
-
SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-975766.html
-
SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-975766.pdf
-
SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-975766.txt