Siemens Solid Edge
Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released a new version for Solid Edge SE2023 and recommends to update to the latest version.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-49132US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing spe… | ||||
| CVE-2023-49131US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing spe… | ||||
| CVE-2023-49130US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing spe… | ||||
| CVE-2023-49129US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain a stack overflow vulnerability while parsing specially… | ||||
| CVE-2023-49128US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application contains an out of bounds write past the end of an allocated bu… | ||||
| CVE-2023-49127US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated str… | ||||
| CVE-2023-49126US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated str… | ||||
| CVE-2023-49124US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated str… | ||||
| CVE-2023-49123US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing speci… | ||||
| CVE-2023-49122US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing speci… | ||||
| CVE-2023-49121US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing speci… | ||||
references
External citations — patches, advisories, analysis.
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - CSAF Versionself
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - HTML Versionself
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - PDF Versionself
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - TXT Versionself
- ICS Advisory ICSA-24-011-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-011-11 - Web Versionself
- Recommended Practicesexternal
remediations (22)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
- FixedSolid Edge SE2023
Update to V223.0 Update 10 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan