Description
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.
Advisories 4
- ICSA-23-320-09 Siemens COMOS CISA ICS & IT advisories · Nov 14, 2023
- SSA-137900 SSA-137900: Multiple Vulnerabilities in COMOS Siemens ProductCERT · Nov 14, 2023
- ICSA-22-195-11 Open Design Alliance Drawings SDK CISA ICS & IT advisories · Sep 13, 2022
- SSA-429204 SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization Siemens ProductCERT · Sep 13, 2022