CVE-2023-39182
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-39182 is a newly discovered vulnerability affecting Solid Edge SE2023 versions prior to V223.0 Update 7. This issue stems from an out-of-bounds read error that occurs when parsing specially crafted DFT files. The consequences of this vulnerability are severe, as it allows an attacker to execute code within the context of the current process. This issue could potentially be exploited for code injection attacks, posing a significant threat to users running affected versions of Solid Edge. It is strongly recommended that users update their software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Siemens Solid Edge
Affected Vendors
- Siemens AG
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions