SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DFT, PAR or PSM format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code. Siemens has released an update for Solid Edge SE2023 and recommends to update to the latest version.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-39419US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the end of an allocated str… | ||||
| CVE-2023-39188US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39187US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39186US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39185US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39184US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39183US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39182US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39181US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the end of an allocated buf… | ||||
references
External citations — patches, advisories, analysis.
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - CSAF Versionself
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - HTML Versionself
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - PDF Versionself
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - TXT Versionself
remediations (18)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - FixedSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan