Siemens Solid Edge before V2023 MP1
Solid Edge is affected by memory corruption vulnerability that could be triggered when the application read files in different file formats such as PAR, ASM, DFT. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released an update for Solid Edge and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-47967US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files… | ||||
references
External citations — patches, advisories, analysis.
- SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1 - CSAF Versionself
- SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1 - PDF Versionself
- SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1 - TXT Versionself
- ICS Advisory ICSA-23-012-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-012-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSolid Edge
Do not open untrusted files in Solid Edge
- FixedSolid Edge
Update to V2023 MP1 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan