Siemens Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2024 and recommends to update to the latest version.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-47942US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability. This could allow an… | ||||
| CVE-2024-47941US | — | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2024-47940US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 - CSAF Versionself
- SSA-351178: Multiple Vulnerabilities in Solid Edge Before SE2024 Update 9 - HTML Versionself
- ICS Advisory ICSA-24-319-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-319-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationSolid Edge SE2024
Do not open untrusted PAR files in affected applications
- MitigationSolid Edge SE2024
Do not open untrusted PSM files in affected applications
- BehobenSolid Edge SE2024
Update to V224.0 Update 9 or later version
- BehobenSolid Edge SE2024
Update to V224.0 Update 9 or later version
- BehobenSolid Edge SE2024
Update to V224.0 Update 9 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan