Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DWG, IFC, OBJ or STP format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code. Siemens has released several updates for Solid Edge SE2023 and recommends to update to the latest version.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-39549US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application contains a use-after-free vulnerability that could be triggered… | ||||
| CVE-2023-30986US | — | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memor… | ||||
| CVE-2023-30985US | medium5.5 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out… | ||||
| CVE-2023-0973US | medium5.5 | — | ||
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructe… | ||||
references
External citations — patches, advisories, analysis.
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - CSAF Versionself
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - HTML Versionself
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - PDF Versionself
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - TXT Versionself
- ICS Advisory ICSA-23-131-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-131-01 - Web Versionself
- Recommended Practicesexternal
remediations (8)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- FixedSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan