SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DFT, PAR or PSM format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code. Siemens has released an update for Solid Edge SE2023 and recommends to update to the latest version.
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-39419US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the end of an allocated str… | ||||
| CVE-2023-39188US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39187US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39186US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39185US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39184US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39183US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39182US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2023-39181US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the end of an allocated buf… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - CSAF Versionself
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - HTML Versionself
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - PDF Versionself
- SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7 - TXT Versionself
Behebungen (18)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 7 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan