Siemens Solid Edge
view advisory published 2022-10-11
Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released an update for the Solid Edge and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-37864US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length heap-based buffer while… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9 - CSAF Versionself
- SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9 - PDF Versionself
- SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9 - TXT Versionself
- ICS Advisory ICSA-22-286-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-286-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationSolid Edge
Do not open untrusted DWG files in Solid Edge
- FixedSolid Edge
Update to SE2022MP9 or later version
https://support.sw.siemens.com/product/246738425/download
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan