SSA-091753: Multiple Vulnerabilities in Solid Edge Before SE2025 Update 5
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2025 and recommends to update to the latest version.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40741US | — | — | ||
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing spec… | ||||
| CVE-2025-40740US | — | — | ||
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
| CVE-2025-40739US | — | — | ||
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated stru… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationSolid Edge SE2025
Do not open untrusted CFG files in affected applications
- MitigationSolid Edge SE2025
Do not open untrusted PAR files in the affected applications
- MitigationSolid Edge SE2025
Do not open untrusted PAR files in the affected applications
- BehobenSolid Edge SE2025
Update to V225.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenSolid Edge SE2025
Update to V225.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenSolid Edge SE2025
Update to V225.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan