Step Tools Third-Party
Advisory ansehen veröffentlicht 2023-03-29
Successful exploitation of this vulnerability could allow an attacker to deny application usage when reading a specially constructed file.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0973US | medium5.5 | — | ||
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructe… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-068-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-068-04 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSTEPTools v18SP1 ifcmesh library
STEPTools has provided an updated version of their software and recommends users update to v18.102. STEPTools requests users contact them via email for assistance with obtaining and applying the update.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan