PT-2023-8537 · Siemens · Solid Edge

CVE-2023-49130

·

Publicado

2023-11-22

·

Atualizado

2024-01-10

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Solid Edge SE2023 versions prior to V223.0 Update 10
Description A vulnerability has been identified in the affected application, which is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Recommendations For Solid Edge SE2023 versions prior to V223.0 Update 10, update to V223.0 Update 10 or later to resolve the issue. As a temporary workaround, consider restricting access to PAR files or avoiding the use of specially crafted PAR files until a patch is applied.

Correção

Access of Uninitialized Pointer

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-01130
CVE-2023-49130

Produtos afetados

Solid Edge