Siemens Solid Edge
Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released a new version for Solid Edge SE2023 and recommends to update to the latest version.
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-49132US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing spe… | ||||
| CVE-2023-49131US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing spe… | ||||
| CVE-2023-49130US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitialized pointer access while parsing spe… | ||||
| CVE-2023-49129US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain a stack overflow vulnerability while parsing specially… | ||||
| CVE-2023-49128US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application contains an out of bounds write past the end of an allocated bu… | ||||
| CVE-2023-49127US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated str… | ||||
| CVE-2023-49126US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated str… | ||||
| CVE-2023-49124US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated str… | ||||
| CVE-2023-49123US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing speci… | ||||
| CVE-2023-49122US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing speci… | ||||
| CVE-2023-49121US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to heap-based buffer overflow while parsing speci… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - CSAF Versionself
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - HTML Versionself
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - PDF Versionself
- SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge - TXT Versionself
- ICS Advisory ICSA-24-011-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-011-11 - Web Versionself
- Recommended Practicesexternal
Behebungen (22)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
- BehobenSolid Edge SE2023
Update to V223.0 Update 10 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan