PT-2023-1179 · Siemens · Solid Edge

CVE-2022-47967

·

Publicado

2023-01-10

·

Atualizado

2023-06-22

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Solid Edge versions prior to V2023 MP1
Description A memory corruption issue has been identified in the DOCMGMT.DLL of Solid Edge. This issue can be triggered while parsing files in different formats such as PAR, ASM, and DFT, potentially allowing an attacker to execute code in the context of the current process.
Recommendations For versions prior to V2023 MP1, update to V2023 MP1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DOCMGMT.DLL until a patch is available. Avoid parsing untrusted files in PAR, ASM, and DFT formats until the issue is resolved.

Correção

Memory Corruption

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00396
CVE-2022-47967

Produtos afetados

Solid Edge