SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge
Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with the affected application, an attacker could leverage the vulnerability to crash the application or execute arbitrary code. Siemens has released updates for the affected products and recommends to update to the latest versions. Note: - This advisory covers security vulnerabilities recently disclosed by Open Design Alliance [0] [0] https://www.opendesign.com/security-advisories
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-26495US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage th… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - CSAF Versionself
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - HTML Versionself
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - PDF Versionself
- SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge - TXT Versionself
Behebungen (2)
- MitigationSolid Edge SE2023
Avoid to open untrusted files from unknown sources in Solid Edge
- BehobenSolid Edge SE2023
Update to V223.0 Update 5 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan