SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DWG, IFC, OBJ or STP format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code. Siemens has released several updates for Solid Edge SE2023 and recommends to update to the latest version.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-39549US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application contains a use-after-free vulnerability that could be triggered… | ||||
| CVE-2023-30986US | — | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memor… | ||||
| CVE-2023-30985US | medium5.5 | — | ||
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out… | ||||
| CVE-2023-0973US | medium5.5 | — | ||
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructe… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - CSAF Versionself
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - HTML Versionself
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - PDF Versionself
- SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge - TXT Versionself
Behebungen (8)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- BehobenSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/ - BehobenSolid Edge SE2023
Update to V223.0 Update 2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan