CVE-2023-39419
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Aug 8, 2023
Updated: Aug 15, 2023
CWE ID 787
Summary
CVE-2023-39419 is a newly identified vulnerability affecting all versions of Solid Edge SE2023 below V223.0 Update 7. This issue stems from an out-of-bounds write vulnerability in the applications' handling of specially crafted DFT files. When parsing these files, the software inadvertently writes data beyond the allocated structure boundaries. An attacker can exploit this flaw to execute code in the context of the current process.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Siemens AG