PT-2023-8537 · Siemens · Solid Edge
CVE-2023-49130
·
Publicado
2023-11-22
·
Atualizado
2024-01-10
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Solid Edge SE2023 versions prior to V223.0 Update 10
Description
A vulnerability has been identified in the affected application, which is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Recommendations
For Solid Edge SE2023 versions prior to V223.0 Update 10, update to V223.0 Update 10 or later to resolve the issue. As a temporary workaround, consider restricting access to PAR files or avoiding the use of specially crafted PAR files until a patch is applied.
Correção
Access of Uninitialized Pointer
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Solid Edge