Siemens Solid Edge
Advisory ansehen veröffentlicht 2026-05-12
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2026 and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-44412US | — | — | ||
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing spec… | ||||
| CVE-2026-44411US | — | — | ||
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing spec… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-921111: Two File Parsing Vulnerabilities in Solid Edge Before Version SE226 Update 5 - CSAF Versionself
- SSA-921111: Two File Parsing Vulnerabilities in Solid Edge Before Version SE226 Update 5 - HTML Versionself
- ICS Advisory ICSA-26-134-03 JSONself
- ICS Advisory ICSA-26-134-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSolid Edge
Update to V226.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenSolid Edge
Update to V226.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan