CVE-2023-39187
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Aug 8, 2023
Updated: Aug 10, 2023
CWE ID 125
Summary
CVE-2023-39187 is a newly disclosed vulnerability that affects all versions of Solid Edge SE2023 prior to V223.0 Update 7. This issue arises due to an out-of-bounds read vulnerability in the software's handling of DFT files. Maliciously crafted DFT files can cause the application to read past the designated memory boundary, potentially resulting in code execution for the attacker, thus compromising the affected system with the attacker's privileges.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Siemens Solid Edge
Affected Vendors
- Siemens AG