Siemens NX
NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released a new version for NX and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41908US | — | — | ||
A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT fi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-357412: PRT File Parsing Vulnerability in NX Before V2406.3000 - CSAF Versionself
- SSA-357412: PRT File Parsing Vulnerability in NX Before V2406.3000 - HTML Versionself
- ICS Advisory ICSA-24-228-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-228-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationNX
Do not open untrusted PRT files from unknown sources
- BehobenNX
Update to V2406.3000 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan