PT-2023-6677 · Siemens · Solid Edge
CVE-2023-24564
·
Publicado
2023-02-14
·
Atualizado
2023-03-14
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Solid Edge SE2022 versions prior to V222.0MP12
Solid Edge SE2023 versions prior to V223.0Update2
Description
A memory corruption issue has been identified in the affected application while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. The vulnerability is related to a buffer overflow in memory.
Recommendations
For Solid Edge SE2022 versions prior to V222.0MP12, update to version V222.0MP12 or later.
For Solid Edge SE2023 versions prior to V223.0Update2, update to version V223.0Update2 or later.
As a temporary workaround, consider avoiding the use of specially crafted DWG files until a patch is available.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Solid Edge