CVE-2023-39182
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-39182 is a newly discovered vulnerability affecting Solid Edge SE2023 versions prior to V223.0 Update 7. This issue stems from an out-of-bounds read error that occurs when parsing specially crafted DFT files. The consequences of this vulnerability are severe, as it allows an attacker to execute code within the context of the current process. This issue could potentially be exploited for code injection attacks, posing a significant threat to users running affected versions of Solid Edge. It is strongly recommended that users update their software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Siemens Solid Edge
Affected Vendors
- Siemens AG