PT-2023-6755 · Siemens · Siemens Solid Edge Se2023+1
CVE-2023-24563
·
Publicado
2023-02-14
·
Atualizado
2023-03-14
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Siemens Solid Edge SE2022 versions prior to V222.0MP12
Siemens Solid Edge SE2023 versions prior to V223.0Update2
Description
The issue is related to the use of an uninitialized pointer on the stack while parsing specially crafted PAR files. This could allow an attacker to execute arbitrary code in the context of the current process.
Recommendations
For Siemens Solid Edge SE2022 versions prior to V222.0MP12, update to version V222.0MP12 or later.
For Siemens Solid Edge SE2023 versions prior to V223.0Update2, update to version V223.0Update2 or later.
Correção
Access of Uninitialized Pointer
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Siemens Solid Edge Se2022
Siemens Solid Edge Se2023