Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-24552

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.

Published

2023-02-14T11:15:15.137

Last Modified

2024-11-21T07:48:06.677

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens solid_edge_se2022 - Yes
Application siemens solid_edge_se2022 maintenance_pack_1 Yes
Application siemens solid_edge_se2022 maintenance_pack_2 Yes
Application siemens solid_edge_se2022 maintenance_pack_3 Yes
Application siemens solid_edge_se2022 maintenance_pack_4 Yes
Application siemens solid_edge_se2022 maintenance_pack_5 Yes
Application siemens solid_edge_se2022 maintenance_pack_7 Yes
Application siemens solid_edge_se2022 maintenance_pack_8 Yes
Application siemens solid_edge_se2022 maintenance_pack_9 Yes
Application siemens solid_edge_se2022 maintenance_pack_10 Yes
Application siemens solid_edge_se2022 maintenance_pack_11 Yes
Application siemens solid_edge_se2023 < 2210.0002.004 Yes
References