Siemens Solid Edge
Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code. Siemens has released updates for the affected products and recommends to update to the latest versions. Note: - This advisory covers security vulnerabilities recently disclosed by Open Design Alliance [0] [0] https://www.opendesign.com/security-advisories
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-26495US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage th… | ||||
references
External citations — patches, advisories, analysis.
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - CSAF Versionself
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - HTML Versionself
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - PDF Versionself
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - TXT Versionself
- ICS Advisory ICSA-23-166-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-166-09 - Web Versionself
- Recommended Practicesexternal
remediations (2)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- FixedSolid Edge SE2023
Update to V223.0 Update 5 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan