Description
A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17627)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge | All Versions < SE2022MP9 | — |
Advisories 2
- ICSA-22-286-03 Siemens Solid Edge CISA ICS & IT advisories · Oct 11, 2022
- SSA-258115 SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9 Siemens ProductCERT · Oct 11, 2022