Siemens Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application is parsing PAR files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to execute arbitrary code in the context of the current process. Siemens has released a new version for Solid Edge and recommends to update to the latest version.
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-34773US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected applications contain a stack overflow vulnerability while parsing specially crafted… | ||||
| CVE-2024-34772US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-34771US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnerable to heap-based buffer overflow while parsing specially cra… | ||||
| CVE-2024-33493US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33492US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33491US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33490US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure w… | ||||
| CVE-2024-33489US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially cra… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - CSAF Versionself
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - HTML Versionself
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - PDF Versionself
- SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge - TXT Versionself
- ICS Advisory ICSA-24-137-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-137-09 - Web Versionself
- Recommended Practicesexternal
Behebungen (16)
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- MitigationSolid Edge
Do not open untrusted PAR files in Solid Edge
- BehobenSolid Edge
Update to V224.0 Update 2 or later version
- BehobenSolid Edge
Update to V224.0 Update 2 or later version
- BehobenSolid Edge
Update to V224.0 Update 4 or later version
- BehobenSolid Edge
Update to V224.0 Update 5 or later version
- BehobenSolid Edge
Update to V224.0 Update 5 or later version
- BehobenSolid Edge
Update to V224.0 Update 5 or later version
- BehobenSolid Edge
Update to V224.0 Update 5 or later version
- BehobenSolid Edge
Update to V224.0 Update 5 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan