CVE-2023-39186

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 8, 2023
Updated: Aug 10, 2023
CWE ID 125

Summary

CVE-2023-39186 is a newly discovered vulnerability affecting all versions of Solid Edge SE2023 below V223.0 Update 7. This issue arises due to an out-of-bounds read vulnerability during the processing of specially crafted DFT files. The glitch permits an attacker to read memory beyond the allocated structure, potentially leading to code execution in the context of the current process.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Siemens Solid Edge

Affected Vendors

  • Siemens AG