PT-2023-6656 · Siemens · Siemens Solid Edge Se2023+1

CVE-2023-24549

·

Publicado

2023-02-14

·

Atualizado

2023-03-14

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Siemens Solid Edge SE2022 versions prior to V222.0MP12 Siemens Solid Edge SE2023 versions prior to V223.0Update2
Description The issue is related to a buffer overflow in memory when reading data. This can be exploited by an attacker using specially crafted PAR files to execute arbitrary code. The vulnerability is associated with the parsing of these files.
Recommendations For Siemens Solid Edge SE2022 versions prior to V222.0MP12, update to version V222.0MP12 or later. For Siemens Solid Edge SE2023 versions prior to V223.0Update2, update to version V223.0Update2 or later.

Correção

Stack Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-07426
CVE-2023-24549

Produtos afetados

Siemens Solid Edge Se2022
Siemens Solid Edge Se2023